9 matches found
CVE-2026-6164
A security flaw has been discovered in code-projects Lost and Found Thing Management 1.0. This affects an unknown part of the file /addcat.php. Performing a manipulation of the argument cata results in sql injection. The attack can be initiated remotely. The exploit has been released to the publi...
EUVD-2026-21875
A security flaw has been discovered in code-projects Lost and Found Thing Management 1.0. This affects an unknown part of the file /addcat.php. Performing a manipulation of the argument cata results in sql injection. The attack can be initiated remotely. The exploit has been released to the publi...
CVE-2026-6164
Code-projects Lost and Found Thing Management 1.0 contains a SQL injection in an unknown area of /addcat.php via the cata argument. This vulnerability can be triggered remotely and is substantiated by public exploit activity. The CVE-2026-6164 details, as tracked by NVD and CVE records, show a ne...
CVE-2026-6164 code-projects Lost and Found Thing Management addcat.php sql injection
A security flaw has been discovered in code-projects Lost and Found Thing Management 1.0. This affects an unknown part of the file /addcat.php. Performing a manipulation of the argument cata results in sql injection. The attack can be initiated remotely. The exploit has been released to the publi...
PT-2026-32275
A security flaw has been discovered in code-projects Lost and Found Thing Management 1.0. This affects an unknown part of the file /addcat.php. Performing a manipulation of the argument cata results in sql injection. The attack can be initiated remotely. The exploit has been released to the publi...
CVE-2012-1022
SQL injection vulnerability in admin/categories.php in 4images 1.7.10 remote attackers to execute arbitrary SQL commands via the catparentid parameter in an addcat action...
PT-2012-3020
Name of the Vulnerable Software and Affected Versions 4images version 1.7.10 Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the cat parent id parameter in an "addcat" action. This occurs in the admin/categories.php file. Recommendations...
PT-2012-3021
Name of the Vulnerable Software and Affected Versions 4images version 1.7.10 Description The issue allows remote attackers to execute arbitrary SQL commands via the cat parent id parameter in an "addcat" action. This is a SQL injection vulnerability in the admin/categories.php file. Recommendatio...
CVE-2012-1021: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in admin/categories.php in 4images 1.7.10 allows remote attackers to inject arbitrary web script or HTML via the catparentid parameter in an addcat action...