PT-2012-3020

Name of the Vulnerable Software and Affected Versions 4images version 1.7.10 Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the cat parent id parameter in an "addcat" action. This occurs in the admin/categories.php file. Recommendations...

PT-2012-3021

Name of the Vulnerable Software and Affected Versions 4images version 1.7.10 Description The issue allows remote attackers to execute arbitrary SQL commands via the cat parent id parameter in an "addcat" action. This is a SQL injection vulnerability in the admin/categories.php file. Recommendatio...