355 matches found
CVE-2007-4076: Undefined Security Weakness
Multiple SQL injection vulnerabilities in index.asp in Alisveris Sitesi Scripti allow remote attackers to execute arbitrary SQL commands via the 1 productid or 2 catid parameter in a product mod action. NOTE: the provenance of this information is unknown; the details are obtained solely from thir...
CVE-2007-4069: Undefined Security Weakness
SQL injection vulnerability in showcat.php in IndexScript 2.8 and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter...
CVE-2007-4083: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in AlstraSoft AskMe Pro allow remote attackers to inject arbitrary web script or HTML via 1 the catid parameter to search.php or the 2 typ parameter to register.php...
Adult Directory - 'cat_id' SQL Injection
--==+================================================================================+==-- --==+ Adult Directory SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog SITE: http://photo.sourceforge.net/...
IndexScript 2.8 - 'cat_id' SQL Injection
Site: http://indexscript.com Found By: xssvgamer Google Dork: allintext: "This site is powered by IndexScript" exploit: http://www.example.com/showcat.php?catid=-1 UNION ALL SELECT login,password FROM dirlogin / Blind SQL injection in indexscript.. Vul Code: "$sql = "select name, metatitle,...
Sql injection
Multiple SQL injection vulnerabilities in Prozilla Directory Script allow remote attackers to execute arbitrary SQL commands via the catid parameter in a list action to directory.php, and other unspecified vectors...
CVE-2007-3809
Multiple SQL injection vulnerabilities in Prozilla Directory Script allow remote attackers to execute arbitrary SQL commands via the catid parameter in a list action to directory.php, and other unspecified vectors...
CVE-2007-3809
Multiple SQL injection vulnerabilities in Prozilla Directory Script allow remote attackers to execute arbitrary SQL commands via the catid parameter in a list action to directory.php, and other unspecified vectors...
CVE-2007-3809: Undefined Security Weakness
Multiple SQL injection vulnerabilities in Prozilla Directory Script allow remote attackers to execute arbitrary SQL commands via the catid parameter in a list action to directory.php, and other unspecified vectors...
Prozilla Directory Script (directory.php cat_id) SQL Injection Vulnerbility
No description provided by source. --==+================================================================================+==-- --==+ Prozilla Directory Script SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZ...
Prozilla Directory Script (directory.php cat_id) SQL Injection Vulnerbility
Exploit for unknown platform in category web applications =========================================================================== Prozilla Directory Script directory.php catid SQL Injection Vulnerbility ===========================================================================...
Prozilla Directory Script - Directory.php?cat_id SQL Injection
Prozilla Directory Script - Directory.php?catid SQL Injection --==+================================================================================+==-- --==+ Prozilla Directory Script SQL Injection Vulnerbility +==--...
Sql injection
SQL injection vulnerability in viewsubcat.php in Buddy Zone 1.5 allows remote attackers to execute arbitrary SQL commands via the catid parameter...
CVE-2007-3549
SQL injection vulnerability in viewsubcat.php in Buddy Zone 1.5 allows remote attackers to execute arbitrary SQL commands via the catid parameter...
CVE-2007-3549
SQL injection vulnerability in viewsubcat.php in Buddy Zone 1.5 allows remote attackers to execute arbitrary SQL commands via the catid parameter...
Sql injection
Multiple SQL injection vulnerabilities in Buddy Zone 1.5 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the newsid parameter to viewnews.php, 2 the catid parameter to viewevents.php, or 3 the memberid parameter to videogallery.php...
CVE-2007-3549: Undefined Security Weakness
SQL injection vulnerability in viewsubcat.php in Buddy Zone 1.5 allows remote attackers to execute arbitrary SQL commands via the catid parameter...
CVE-2007-3003
Multiple SQL injection vulnerabilities in myBloggie 2.1.6 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 catid or 2 year parameter to index.php in a viewuser action, different vectors than CVE-2005-1500 and CVE-2005-4225...
CVE-2007-3003: Undefined Security Weakness
Multiple SQL injection vulnerabilities in myBloggie 2.1.6 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 catid or 2 year parameter to index.php in a viewuser action, different vectors than CVE-2005-1500 and CVE-2005-4225...
Sql injection
Multiple SQL injection vulnerabilities in phpx 3.5.15 allow remote attackers to execute arbitrary SQL commands via the 1 imageid or 2 catid parameter to a gallery.php; the 3 newsid parameter to b news.php or c print.php; 4 the newscatid parameter to news.php; the 5 catid, 6 topicid, or 7 postid...