209 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in downloads.php in PHP-Fusion 7.02.04 allows remote attackers to inject arbitrary web script or HTML via the catid parameter...
CVE-2012-6043
Cross-site scripting XSS vulnerability in downloads.php in PHP-Fusion 7.02.04 allows remote attackers to inject arbitrary web script or HTML via the catid parameter...
CVE-2010-4770
SQL injection vulnerability in index.php in CommodityRentals DVD Rentals Script allows remote attackers to execute arbitrary SQL commands via the catid parameter in a catalog action...
Sql injection
SQL injection vulnerability in index.php in CommodityRentals DVD Rentals Script allows remote attackers to execute arbitrary SQL commands via the catid parameter in a catalog action...
CVE-2010-4770
CVE-2010-4770 is a SQL injection vulnerability in the CommodityRentals DVD Rentals Script, exposed via index.php in the catalog action. The issue allows remote attackers to execute arbitrary SQL commands through the cat_id parameter. Documents confirm the affected software component is the script...
CVE-2010-4770
SQL injection vulnerability in index.php in CommodityRentals DVD Rentals Script allows remote attackers to execute arbitrary SQL commands via the catid parameter in a catalog action...
ExtCalendar 'cat_id' parameter SQL Injection
The version of the ExtCalendar installed on the remote host is affected by a SQL injection vulnerability. The application fails to properly sanitize user-supplied input to the 'catid' parameter of the 'calendar.php' script before using it in a database query. Regardless of PHP's 'magicquotesgpc'...
CVE-2010-0762
SQL injection vulnerability in index.php in CommodityRentals CD Rental Software allows remote attackers to execute arbitrary SQL commands via the catid parameter in a catalog action...
Sql injection
SQL injection vulnerability in index.php in CommodityRentals CD Rental Software allows remote attackers to execute arbitrary SQL commands via the catid parameter in a catalog action...
CVE-2010-0762: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in CommodityRentals CD Rental Software allows remote attackers to execute arbitrary SQL commands via the catid parameter in a catalog action...
Sql injection
SQL injection vulnerability in download.php in Nicecoder iDesk allows remote attackers to execute arbitrary SQL commands via the catid parameter, a different vector than CVE-2005-3843...
CVE-2009-4624
SQL injection vulnerability in download.php in Nicecoder iDesk allows remote attackers to execute arbitrary SQL commands via the catid parameter, a different vector than CVE-2005-3843...
WordPress 1.5.1 Cat_ID参数SQL注入漏洞
No description provided by source...
Sql injection
SQL injection vulnerability in the Soundset comsoundset component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php...
CVE-2009-3595
SQL injection vulnerability in results.php in VS PANEL 7.5.5 allows remote attackers to execute arbitrary SQL commands via the CatID parameter, a different vector than CVE-2009-3590...
Sql injection
SQL injection vulnerability in results.php in VS PANEL 7.5.5 allows remote attackers to execute arbitrary SQL commands via the CatID parameter, a different vector than CVE-2009-3590...
Sql injection
SQL injection vulnerability in showcat.php in VS PANEL 7.3.6 allows remote attackers to execute arbitrary SQL commands via the CatID parameter...
CVE-2009-3590
SQL injection vulnerability in showcat.php in VS PANEL 7.3.6 allows remote attackers to execute arbitrary SQL commands via the CatID parameter...
CVE-2009-3590: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in showcat.php in VS PANEL 7.3.6 allows remote attackers to execute arbitrary SQL commands via the CatID parameter...
Sql injection
Multiple SQL injection vulnerabilities in BPowerHouse BPGames 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 catid parameter to main.php and 2 gameid parameter to game.php...