355 matches found
CVE-2006-1140
The CVE describes a SQL injection in RedBLoG 0.5’s rss.php, exploitable via the cat_id parameter to allow remote execution of arbitrary SQL commands. Affected software: RedBLoG 0.5; vulnerability cause: unsanitized input leading to SQL injection. Impact per NVD: Partial confidentiality/integrity/...
CVE-2006-1140
SQL injection vulnerability in rss.php in RedBLoG 0.5 allows remote attackers to execute arbitrary SQL commands via the catid parameter...
CVE-2006-1140: Undefined Security Weakness
SQL injection vulnerability in rss.php in RedBLoG 0.5 allows remote attackers to execute arbitrary SQL commands via the catid parameter...
CVE-2005-4304: Undefined Security Weakness
index.php in ezDatabase 2.1.2 and earlier allows remote attackers to obtain sensitive information via an invalid catid parameter, which leaks the full pathname in an error message. NOTE: these details are uncertain because the original report has terminology problems and lack of relevant details...
CVE-2005-3986
This CVE (CVE-2005-3986) affects Instant Photo Gallery (version 1 and earlier). The vulnerability is SQL injection in two parameters: cat_id in portfolio.php and cid in content.php, allowing remote attackers to execute arbitrary SQL commands. The exploitation is described as remote and results in...
CVE-2005-3986
Multiple SQL injection vulnerabilities in Instant Photo Gallery 1 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 catid parameter in portfolio.php and 2 cid parameter in content.php...
CVE-2005-3843
SQL injection vulnerability in faq.php in Nicecoder iDesk 1.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter...
CVE-2005-3843: Undefined Security Weakness
SQL injection vulnerability in faq.php in Nicecoder iDesk 1.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter...
CVE-2005-2477
shopdisplayproducts.php in Naxtor Shopping Cart 1.0 allows remote attackers to obtain sensitive information via a catid with a "'" single quote, which reveals the path in an error message, possibly due to an SQL injection vulnerability...
CVE-2004-2202: Undefined Security Weakness
Multiple SQL injection vulnerabilities in DUware DUclassified 4.0 through 4.2 allows remote attackers to bypass authentication and execute other commands on the server's underlying database via the 1 catid or 2 subid parameters in adDetail.asp, or 2 the password parameter in the login form...
WordPress 'template-functions-category.php' 'cat_ID' Parameter SQL Injection
The version of WordPress installed on the remote host fails to properly sanitize user-supplied input to the 'catID' variable in the 'template-functions-category.php' script. This failure may allow an attacker to influence database queries resulting in the disclosure of sensitive information. Note...
CVE-2005-1500
Multiple SQL injection vulnerabilities in myBloggie 2.1.1 allow remote attackers to execute arbitrary SQL commands via 1 the keyword parameter in search.php; or 2 the dateno parameter in viewdate mode, 3 the catid parameter in viewcat mode, the 4 monthno or 5 year parameter in viewmonth mode, or ...
CVE-2004-1579
index.php in CubeCart 2.0.1 allows remote attackers to gain sensitive information via an HTTP request with an invalid catid parameter, which reveals the full path in a PHP error message...
CVE-2004-1580: Undefined Security Weakness
SQL injection vulnerability in index.php in CubeCart 2.0.1 allows remote attackers to execute arbitrary SQL commands via the catid parameter...
