355 matches found
Sql injection
SQL injection vulnerability in main.php in vbLOGIX Tutorial Script 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter in a list action...
CVE-2008-4350: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in main.php in vbLOGIX Tutorial Script 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter in a list action...
CVE-2008-4353: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in link.php in Linkarity allows remote attackers to execute arbitrary SQL commands via the catid parameter. NOTE: although one component of Linkarity is distributable PHP code, this issue might be site-specific. If so, it should not be included in CVE...
vbLOGIX Tutorial Script 1.0 - cat_id SQL Injection
vbLOGIX Tutorial Script 1.0 - catid SQL Injection ===================================================================================================== vbLOGIX Tutorial Script = v1.0 catid Remote SQL Injection Exploit...
vbLOGIX Tutorial Script 1.0 - 'cat_id' SQL Injection
===================================================================================================== vbLOGIX Tutorial Script = v1.0 catid Remote SQL Injection Exploit ===================================================================================================== Venedor site :...
CVE-2008-4053
Multiple cross-site scripting XSS vulnerabilities in index.php in the Bluemoon PopnupBLOG module 3.20 and 3.30 for XOOPS allow remote attackers to inject arbitrary web script or HTML via the 1 param, 2 catid, and 3 view parameters...
CVE-2008-4053: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in index.php in the Bluemoon PopnupBLOG module 3.20 and 3.30 for XOOPS allow remote attackers to inject arbitrary web script or HTML via the 1 param, 2 catid, and 3 view parameters...
Vastal I-Tech Cosmetics Zone (cat_id) SQL Injection Vulnerability
No description provided by source. Vastal I-Tech Cosmetics Zone SQL Injection Vulnerability Author : Stack Script Home Page : http://www.vastal.com/cosmetics-zone-a-shopping-cart-for-your-cosmetics-shop-online.html Demo : http://www.vastal.com/cosmeticszone/ Exploit:...
Vastal I-Tech DVD Zone - cat_id SQL Injection
Vastal I-Tech DVD Zone - catid SQL Injection Vastal I-Tech DVD Zone catid SQL Injection Vulnerability Author : DeViL iRaQ Email : guitarlover46atyahoodotcom Price : $399.99 : Script Home Page : hhttp://www.vastal.com/dvd-zone-dvd-rental-script.html Demo : http://dvdzone.vastal.com/ Dork : N/A...
Vastal I-Tech Mag Zone - 'cat_id' SQL Injection
Vastal I-Tech Mag Zone SQL Injection Vulnerability Author : Stack Script Home Page : http://www.vastal.com/mag-zone-online-library-system.html Demo : http://www.vastal.com/mag/ the exploit fate the password use ur mind for have the column username Exploit:...
CVE-2008-3772
SQL injection vulnerability in categoriesportal.php in Pars4u Videosharing 1 allows remote attackers to execute arbitrary SQL commands via the catid parameter...
CVE-2008-3772: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in categoriesportal.php in Pars4u Videosharing 1 allows remote attackers to execute arbitrary SQL commands via the catid parameter...
CVE-2008-3030
SQL injection vulnerability in default.asp in EfesTECH Shop 2.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter in an urunler action...
Sql injection
SQL injection vulnerability in default.asp in EfesTECH Shop 2.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter in an urunler action...
CVE-2008-3030: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in default.asp in EfesTECH Shop 2.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter in an urunler action...
CVE-2008-2994
Multiple cross-site scripting XSS vulnerabilities in PHPEasyData 1.5.4 allow remote attackers to inject arbitrary web script or HTML via the 1 annuaire parameter to a lastrecords.php and b annuaire.php and the 2 by and 3 catid parameters to annuaire.php...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in PHPEasyData 1.5.4 allow remote attackers to inject arbitrary web script or HTML via the 1 annuaire parameter to a lastrecords.php and b annuaire.php and the 2 by and 3 catid parameters to annuaire.php...
CVE-2008-2994: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in PHPEasyData 1.5.4 allow remote attackers to inject arbitrary web script or HTML via the 1 annuaire parameter to a lastrecords.php and b annuaire.php and the 2 by and 3 catid parameters to annuaire.php...