CVE-2007-0309: Undefined Security Weakness

SQL injection vulnerability in blocks/block-OldArticles.php in Francisco Burzi PHP-Nuke 7.9 and earlier, when registerglobals is enabled and magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the cat parameter...

CVE-2007-0259

Ezboxx Portal System Beta 0.7.6 and earlier allows remote attackers to obtain sensitive information via an invalid cat parameter to boxx/knowledgebase.asp, which reveals the path in an error message...

CVE-2007-0259

Ezboxx Portal System Beta 0.7.6 and earlier allows remote attackers to obtain sensitive information via an invalid cat parameter to boxx/knowledgebase.asp, which reveals the path in an error message...

CVE-2007-0259: Exposure of Sensitive Information to an Unauthorized Actor

Ezboxx Portal System Beta 0.7.6 and earlier allows remote attackers to obtain sensitive information via an invalid cat parameter to boxx/knowledgebase.asp, which reveals the path in an error message...

Sql injection

Multiple SQL injection vulnerabilities in Coppermine Photo Gallery 1.4.10 and earlier allow remote authenticated administrators to execute arbitrary SQL commands via 1 the cat parameter to albmgr.php, and possibly 2 the gid parameter to usermgr.php; 3 the start parameter to dbecard.php; and the...

CVE-2006-6768: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in default.asp in PWP Technologies The Classified Ad System allow remote attackers to inject arbitrary web script or HTML via the 1 cat or 2 main parameter...

CVE-2006-6243

Multiple SQL injection vulnerabilities in index.asp in FipsSHOP allow remote attackers to execute arbitrary SQL commands via the 1 cat or 2 did parameter...

CVE-2006-6243

Multiple SQL injection vulnerabilities in index.asp in FipsSHOP allow remote attackers to execute arbitrary SQL commands via the 1 cat or 2 did parameter...

CVE-2006-6243: Undefined Security Weakness

Multiple SQL injection vulnerabilities in index.asp in FipsSHOP allow remote attackers to execute arbitrary SQL commands via the 1 cat or 2 did parameter...

CVE-2006-6194

Multiple SQL injection vulnerabilities in index.asp in Ultimate Survey Pro allow remote attackers to execute arbitrary SQL commands via the 1 cat or 2 did parameter...

CVE-2006-6194: Undefined Security Weakness

Multiple SQL injection vulnerabilities in index.asp in Ultimate Survey Pro allow remote attackers to execute arbitrary SQL commands via the 1 cat or 2 did parameter...

CVE-2006-6082

CVE-2006-6082 affects the CreaScripts Creadirectory component. The documented issue is multiple XSS vulnerabilities that allow remote attackers to inject arbitrary script or HTML via the (1) cat parameter to addlisting.asp or (2) the search parameter to search.asp. The root cause is insufficient ...

CVE-2006-6082: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in CreaScripts Creadirectory allow remote attackers to inject arbitrary web script or HTML via the 1 cat parameter to addlisting.asp or the 2 search parameter to search.asp...

CVE-2006-5847

CVE-2006-5847 is a Cross-site scripting (XSS) vulnerability in FreeWebshop 2.2.2 and earlier. The flaw exists in index.php via the cat parameter, allowing remote attackers to inject arbitrary web script or HTML. The provided documents do not include exploitation details, affected versions beyond ...

CVE-2006-5847: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in FreeWebshop 2.2.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the cat parameter...

CVE-2006-5707

SQL injection vulnerability in index.php in PHPEasyData Pro 1.4.1 and 2.2.1 allows remote attackers to execute arbitrary SQL commands via the cat parameter...

CVE-2006-5707: Undefined Security Weakness

SQL injection vulnerability in index.php in PHPEasyData Pro 1.4.1 and 2.2.1 allows remote attackers to execute arbitrary SQL commands via the cat parameter...

CVE-2006-5512

Cross-site scripting XSS vulnerability in article.htm in Zwahlen Online Shop allows remote attackers to inject arbitrary web script or HTML via the cat parameter...

CVE-2006-5512

Cross-site scripting XSS vulnerability in article.htm in Zwahlen Online Shop allows remote attackers to inject arbitrary web script or HTML via the cat parameter...

CVE-2006-5512: Undefined Security Weakness

Cross-site scripting XSS vulnerability in article.htm in Zwahlen Online Shop allows remote attackers to inject arbitrary web script or HTML via the cat parameter...