Sql injection

Multiple SQL injection vulnerabilities in PHP JackKnife PHPJK allow remote attackers to execute arbitrary SQL commands via 1 the iCategoryUnq parameter to GDisplay.php or 2 the iSearchID parameter to Search/DisplayResults.php...

CVE-2007-3000: Undefined Security Weakness

Multiple SQL injection vulnerabilities in PHP JackKnife PHPJK allow remote attackers to execute arbitrary SQL commands via 1 the iCategoryUnq parameter to GDisplay.php or 2 the iSearchID parameter to Search/DisplayResults.php...

CVE-2005-4239

The connected documents confirm CVE-2005-4239 is an XSS vulnerability in PHP JackKnife (2.21 and earlier) affecting Search/DisplayResults.php via URL-encoded sKeywords. Exploitation details are not expanded beyond the provided description; no explicit patch/version remediation is documented in th...

CVE-2005-4239: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Search/DisplayResults.php in PHP JackKnife 2.21 and earlier allows remote attackers to inject arbitrary web script or HTML via URL-encoded values in the sKeywords parameter...