CVE-2010-1265

The CVE-2010-1265 entry describes a SQL injection in Adam Corley dcsFlashGames (com_dcs_flashgames) where the vulnerability is triggered by the catid parameter to index.php. This allows remote attackers to execute arbitrary SQL commands. Affected component is the dcsFlashGames module; no remediat...

CVE-2010-1265: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Adam Corley dcsFlashGames comdcsflashgames allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php...

Sql injection

SQL injection vulnerability in the jEmbed-Embed Anything comjembed component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a summary action to index.php...

Sql injection

SQL injection vulnerability in the Parkview Consultants SimpleFAQ comsimplefaq component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a display action to index.php...

Cross site scripting

Cross-site scripting XSS vulnerability in the Marketplace commarketplace component 1.2 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the catid parameter in a showcategory action to index.php...

CVE-2010-0374: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Marketplace commarketplace component 1.2 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the catid parameter in a showcategory action to index.php...

Cross site scripting

Cross-site scripting XSS vulnerability in submitlink.php in Glitter Central Script allows remote attackers to inject arbitrary web script or HTML via the catid parameter...

CVE-2010-0320

The CVE-2010-0320 entry describes a Cross-site scripting (XSS) vulnerability in Glitter Central Script, specifically in submitlink.php where the catid parameter can be exploited to inject arbitrary web script or HTML. Affected component: Glitter Central Script, function/endpoint: submitlink.php, ...

CVE-2010-0320

Cross-site scripting XSS vulnerability in submitlink.php in Glitter Central Script allows remote attackers to inject arbitrary web script or HTML via the catid parameter...

CVE-2010-0320: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in submitlink.php in Glitter Central Script allows remote attackers to inject arbitrary web script or HTML via the catid parameter...

DELTAScripts PHPLinks SQL Injection

/ Name : DELTAScripts PHPLinks Vuln : SQL Injection Author : Hamza 'MizoZ' N. Email : mizozxatgmaildotcom WebSite : www.greymen.org Greetz : Zuka, all friends & arab hackers / Vulnerability is in the $GET'catid' HOST/PATH/index.php?catid=8+union+all+select+1,2,3,4,5,6--...

CVE-2009-4474: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Mike de Boer zoom comzoom component 2.0 for Mambo allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php...

CVE-2009-4229: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in ActiveWebSoftwares Active Bids allow remote attackers to execute arbitrary SQL commands via 1 the catid parameter in the PATHINFO to the default URI or 2 the catid parameter to default.asp. NOTE: this might overlap CVE-2009-0429.3. NOTE: the provenance of...

Sql injection

SQL injection vulnerability in classified.php in phpBazar 2.1.1fix and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter, a different vector than CVE-2008-3767...

CVE-2009-4221

SQL injection vulnerability in classified.php in phpBazar 2.1.1fix and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter, a different vector than CVE-2008-3767...

CVE-2009-4221: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in classified.php in phpBazar 2.1.1fix and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter, a different vector than CVE-2008-3767...

phpBazar 2.1.1fix - cid SQL Injection

phpBazar 2.1.1fix - cid SQL Injection / Author : MizoZ from MA Group : EvilWay, evilwayatmaildotcom Email : mizozxatgmaildotcom Greetz : Zuka, Dyle !! MABROOK L3IIIIIIIIIID / The vulnerability is in the $GET'catid' , exploit :...

CVE-2009-2891

SQL injection vulnerability in list.php in PHP Scripts Now Riddles allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2009-2891

SQL injection vulnerability in list.php in PHP Scripts Now Riddles allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2009-2891: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in list.php in PHP Scripts Now Riddles allows remote attackers to execute arbitrary SQL commands via the catid parameter...