CVE-2017-11583

dayrui FineCms 5.0.9 has SQL Injection via the catid parameter in an action=related request to libraries/Template.php...

SQL Injection Vulnerability in UReader Digital Library System browse.php Page

UReader Digital Library UReader Digital Library is a comprehensive platform for providing e-books in original foreign languages. A SQL injection vulnerability exists in the UReader Digital Library browse.php page. The vulnerability is caused by not filtering the 'catid' parameter effectively, whi...

Joomla com_fsf component 'catid' parameter SQL injection vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the 'catid' parameter of the Joomla comfsf component. An attacker can exploit the vulnerability to access or modify database data...

obi.at XSS vulnerability

Vulnerable URL: http://www.obi.at/bk/html/index.html?catId="...

MallBuilder /cate_show_ajax.php catid参数 SQL注入

No description provided by source...

Joomla Spider Random Article Component - SQL Injection

Exploit Title : Joomla Spider Random Article Component SQL Injection vulnerability Author : Jagriti Sahu AKA Incredible Vendor Link : http://demo.web-dorado.com/spider-random-article.html Date : 22/03/2015 Discovered at : IndiShell Lab Love to : error1046 ^^ ,Team IndiShell,Codebreaker ICA...

ETouch Systems SamePage Enterprise Edition SQL Injection Vulnerability

ETouch Systems SamePage Enterprise Edition is an enterprise version of the Wiki WiKi solution for wikis and blogs from ETouch Systems, USA. The solution supports team collaboration, role management and document management. An SQL injection vulnerability exists in ETouch Systems SamePage Enterpris...

CVE-2015-2070: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in eTouch SamePage Enterprise Edition 4.4.0.0.239 allows remote attackers to execute arbitrary SQL commands via the catId parameter to cm/blogrss/feed...

Sql injection

SQL injection vulnerability in ChangeEmail.php in iTechClassifieds 3.03.057 allows remote attackers to execute arbitrary SQL commands via the PreviewNum parameter. NOTE: the CatID parameter is already covered by CVE-2008-0685...

CVE-2014-100020

SQL injection vulnerability in ChangeEmail.php in iTechClassifieds 3.03.057 allows remote attackers to execute arbitrary SQL commands via the PreviewNum parameter. NOTE: the CatID parameter is already covered by CVE-2008-0685...

CTS Projects & Software ClassAd SQL Injection Vulnerability

CTS Projects & Software ClassAd is an online advertising application. The CTS Projects & Software ClassAd showads.php script does not properly filter the catid parameter, allowing remote attackers to exploit the vulnerability by submitting specially crafted SQL queries to manipulate or obtain...

CVE-2014-9455

SQL injection vulnerability in showads.php in CTS Projects & Software ClassAd 3.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2014-9455

SQL injection vulnerability in showads.php in CTS Projects & Software ClassAd 3.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2014-9455: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in showads.php in CTS Projects & Software ClassAd 3.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

Dashing Times SQL Injection

dashing times cms scripts, sql injection vulnerability. products page: http://www.dashingtimes.in/portfolio/ authorpentester: 3spi0n on social: twitter.com/eyyamgudeer description i found vulnerability all cms scripts of dashingtimes web design. some weak websites + categories.php, catid param...

CVE-2014-4741

SQL injection vulnerability in demo/ads.php in Artifectx xClassified 1.2 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

Sql injection

SQL injection vulnerability in demo/ads.php in Artifectx xClassified 1.2 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2014-4741: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in demo/ads.php in Artifectx xClassified 1.2 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

Joomla! 'com_as' Component 'catid' Parameter SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/38757/info The 'comas' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...

Joomla Component com_question - SQL Injection Vulnerability

No description provided by source. |Title : Joomla comquestion SQL Injection Vulnerability |Vendor : http://www.alex-ensdorf.de/ |Version : Joomla 1.5 |Date : 15/5/2011 |Author : NeX HaCkEr |Contact : [email protected] | Exploit : | http://localhost/Joomla/index.php/?option=comquestion&catID=S...