Sql injection

SQL injection vulnerability in index.php in ABC eStore 3.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2007-4627

SQL injection vulnerability in index.php in ABC eStore 3.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2007-4627

SQL injection vulnerability in index.php in ABC eStore 3.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

Sql injection

SQL injection vulnerability in directory.php in Prozilla Adult Directory allows remote attackers to execute arbitrary SQL commands via the catid parameter in a list action. NOTE: the original report indicated that this was the "photo" SourceForge project aka Maan Bsat Photo Collection, but that w...

Sql injection

SQL injection vulnerability in showcat.php in IndexScript 2.8 and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2007-4069

SQL injection vulnerability in showcat.php in IndexScript 2.8 and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2007-4056: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in directory.php in Prozilla Adult Directory allows remote attackers to execute arbitrary SQL commands via the catid parameter in a list action. NOTE: the original report indicated that this was the "photo" SourceForge project aka Maan Bsat Photo Collection, but that w...

CVE-2007-3809

Multiple SQL injection vulnerabilities in Prozilla Directory Script allow remote attackers to execute arbitrary SQL commands via the catid parameter in a list action to directory.php, and other unspecified vectors...

Sql injection

Multiple SQL injection vulnerabilities in Prozilla Directory Script allow remote attackers to execute arbitrary SQL commands via the catid parameter in a list action to directory.php, and other unspecified vectors...

CVE-2007-3809: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Prozilla Directory Script allow remote attackers to execute arbitrary SQL commands via the catid parameter in a list action to directory.php, and other unspecified vectors...

CVE-2007-3809

Multiple SQL injection vulnerabilities in Prozilla Directory Script allow remote attackers to execute arbitrary SQL commands via the catid parameter in a list action to directory.php, and other unspecified vectors...

CVE-2007-3549

SQL injection vulnerability in viewsubcat.php in Buddy Zone 1.5 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

Sql injection

SQL injection vulnerability in viewsubcat.php in Buddy Zone 1.5 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2007-3549

SQL injection vulnerability in viewsubcat.php in Buddy Zone 1.5 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

Sql injection

SQL injection vulnerability in inclistnews.asp in CodeAvalanche News 1.x allows remote attackers to execute arbitrary SQL commands via the CATID parameter...

CVE-2007-1021

The CVE-2007-1021 entry concerns CodeAvalanche News 1.x, where a SQL injection flaw in inc_listnews.asp allows remote attackers to execute arbitrary SQL commands via the CAT_ID parameter. The underlying issue is improper handling/validation of CAT_ID, enabling crafted input to affect the database...

CVE-2006-3474

Multiple SQL injection vulnerabilities in Belchior Foundry vCard PRO allow remote attackers to execute arbitrary SQL commands via the 1 catid parameter to a gbrowse.php, 2 cardid parameter to b rating.php and c create.php, and the 3 eventid parameter to d search.php...

CVE-2006-2079

Cross-site scripting XSS vulnerability in portfolio.php in Verosky Media Instant Photo Gallery, possibly before 1.0.2, allows remote attackers to inject arbitrary web script or HTML via the catid parameter...

CVE-2006-2079

CVE-2006-2079 describes a cross-site scripting (XSS) vulnerability in Verosky Media Instant Photo Gallery, specifically in portfolio.php, potentially affecting versions before 1.0.2. The flaw is exploitable via the cat_id parameter, enabling remote attackers to inject arbitrary web script or HTML...

CVE-2006-1970

Cross-site scripting XSS vulnerability in classifieds/viewcat.cgi in KCScripts Classifieds, distributed individually and as part of Portal Pack 6.0 and earlier, allows remote attackers to inject arbitrary web script or HTML via the catid parameter...