CVE-2012-1022

SQL injection vulnerability in admin/categories.php in 4images 1.7.10 remote attackers to execute arbitrary SQL commands via the catparentid parameter in an addcat action...

CVE-2012-1021: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in admin/categories.php in 4images 1.7.10 allows remote attackers to inject arbitrary web script or HTML via the catparentid parameter in an addcat action...