CVE-2008-2891

CVE-2008-2891 corresponds to a SQL injection in the PHP script implementing eMuSOFT’s emuCMS 0.3. The vulnerability is triggered via the cat_id parameter in a category action within index.php, allowing remote attackers to execute arbitrary SQL commands. The core issue is improper input handling i...

emuCMS 0.3 (cat_id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ====================================================== emuCMS 0.3 catid Remote SQL Injection Vulnerability ====================================================== Dork : Powered by emuCMS exploit :...

Sql injection

SQL injection vulnerability in jokescategory.php in PHP-Jokesite 2.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2008-2457

PHP-Jokesite 2.0 is affected by an SQL injection in jokes_category.php via the cat_id parameter. The issue allows remote attackers to execute arbitrary SQL commands. This is supported by multiple sources (e.g., CVE-2008-2457 entries in NVD/NVD context) and has a high base impact (BaseScore 7.5) w...

Sql injection

SQL injection vulnerability in linking.page.php in Automated Link Exchange Portal allows remote attackers to execute arbitrary SQL commands via the catid parameter. NOTE: linking.page.php is commonly renamed to link.php, links.php, etc...

CVE-2008-2263

SQL injection vulnerability in linking.page.php in Automated Link Exchange Portal allows remote attackers to execute arbitrary SQL commands via the catid parameter. NOTE: linking.page.php is commonly renamed to link.php, links.php, etc...

CVE-2008-2263: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in linking.page.php in Automated Link Exchange Portal allows remote attackers to execute arbitrary SQL commands via the catid parameter. NOTE: linking.page.php is commonly renamed to link.php, links.php, etc...

Sql injection

SQL injection vulnerability in annuaire.php in PHPEasyData 1.5.4 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2008-2113: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in annuaire.php in PHPEasyData 1.5.4 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2008-2096

SQL injection vulnerability in BackLinkSpider allows remote attackers to execute arbitrary SQL commands via the catid parameter to a site-specific component name such as link.php or backlinkspider.php...

Sql injection

SQL injection vulnerability in BackLinkSpider allows remote attackers to execute arbitrary SQL commands via the catid parameter to a site-specific component name such as link.php or backlinkspider.php...

CVE-2008-2096: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in BackLinkSpider allows remote attackers to execute arbitrary SQL commands via the catid parameter to a site-specific component name such as link.php or backlinkspider.php...

CVE-2008-2083

SQL injection vulnerability in directory.php in Prozilla Hosting Index, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the catid parameter in a list action...

Sql injection

SQL injection vulnerability in directory.php in Prozilla Hosting Index, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the catid parameter in a list action...

Sql injection

SQL injection vulnerability in index.php in Classifieds Caffe allows remote attackers to execute arbitrary SQL commands via the catid parameter in an add action. NOTE: this issue might be site-specific...

CVE-2008-1936

SQL injection vulnerability in index.php in Classifieds Caffe allows remote attackers to execute arbitrary SQL commands via the catid parameter in an add action. NOTE: this issue might be site-specific...

CVE-2008-0842

SQL injection vulnerability in index.php in the Classifier comclasifier component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2008-0842

SQL injection vulnerability in index.php in the Classifier comclasifier component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter...

Sql injection

Multiple SQL injection vulnerabilities in Kvaliitti WebDoc 3.0 CMS allow remote attackers to execute arbitrary SQL commands via 1 the catid parameter to categories.asp; and probably 2 the documentid parameter to categories.asp, and the 3 catid and 4 documentid parameters to subcategory.asp...

CVE-2004-2688

CVE-2004-2688 / CVE-2006-3358 describe multiple XSS vulnerabilities in NewsPHP’s index.php. The issue is triggered by unsanitized user input through the cat_id parameter (and other vectors in related CVEs), which can cause arbitrary web script/HTML to be injected and reflected in error pages. The...