1092 matches found
Sql injection
SQL injection vulnerability in categoriestype.php in phpVID 0.9.9 allows remote attackers to execute arbitrary SQL commands via the cat parameter...
CVE-2007-3610
SQL injection vulnerability in categoriestype.php in phpVID 0.9.9 allows remote attackers to execute arbitrary SQL commands via the cat parameter...
Buddy Zone 1.5 - 'view_sub_cat.php?cat_id' SQL Injection
--==+================================================================================+==-- --==+ Buddy Zone Version 1.5 SQL Injection Vulnerability +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog SITE:...
CVE-2007-3055
Cross-site scripting XSS vulnerability in index.php in Codelib Linker 2.0.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the cat parameter...
CVE-2007-3055
CVE-2007-3055 is an XSS vulnerability affecting Codelib Linker 2.0.4 and earlier. The issue is in index.php where the cat parameter can be exploited to inject arbitrary web script or HTML, enabling remote script execution in the victim’s browser. The primary sources (NVD entry) confirm the vulner...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in cgi/block.cgi in 8e6 R3000 Internet Filter allow remote attackers to inject arbitrary web script or HTML via the 1 URL, 2 CAT, and 3 USER parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from thir...
CVE-2007-2970
Multiple cross-site scripting XSS vulnerabilities in cgi/block.cgi in 8e6 R3000 Internet Filter allow remote attackers to inject arbitrary web script or HTML via the 1 URL, 2 CAT, and 3 USER parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from thir...
CVE-2007-2970
Multiple cross-site scripting XSS vulnerabilities in cgi/block.cgi in 8e6 R3000 Internet Filter allow remote attackers to inject arbitrary web script or HTML via the 1 URL, 2 CAT, and 3 USER parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from thir...
Sql injection
SQL injection vulnerability in index.php in the wfquotes 1.0 0 module for XOOPS allows remote attackers to execute arbitrary SQL commands via the c parameter in a cat action...
Netmao Movie network cat movie system vulnerabilities-vulnerability warning-the black bar safety net
IceskYsl in NOHACK published on the php vulnerabilities topic. The first is the include file vulnerability. So today I quickly found one, not exclusive to! Huh. Program: Netmao Movie network cat movie system. Description: now its latest version is 3. 0, due to the encryption, so it is not good to...
CVE-2007-1962
SQL injection vulnerability in index.php in the WF-Snippets 1.02 and earlier module for XOOPS allows remote attackers to execute arbitrary SQL commands via the c parameter in a cat action...
ubb-sql.txt
UBB.threads SQL Injection Vulnerability The variable 'C' in UBB.threads is susceptible to SQL injection. Vulnerability: http://target.com/ubbthreads.php?Cat=cat&C=' Vulnerable: UBB.threads = 6.1.1 Google d0rk: allintitle:"Forums powered by UBB.threads" John Martinelli [email protected]...
Sql injection
SQL injection vulnerability in wall.php in Picture-Engine 1.2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the cat parameter...
Picture-Engine 1.2.0 - wall.php?cat SQL Injection
Picture-Engine 1.2.0 - wall.php?cat SQL Injection 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15 $cont=0; $result.="\r\n"; $exa.="\r\n"; return $exa."\r\n".$result; $proxyregex =...
Code injection
Direct static code injection vulnerability in postpost.php in Dayfox Blog dfblog 4 allows remote attackers to execute arbitrary PHP code via the cat parameter, which can be executed via a request to posts.php...
Cross site scripting
Cross-site scripting XSS vulnerability in listmain.asp in Fullaspsite ASP Hosting Site allows remote attackers to inject arbitrary web script or HTML via the cat parameter...
Sql injection
SQL injection vulnerability in listmain.asp in Fullaspsite ASP Hosting Site allows remote attackers to execute arbitrary SQL commands via the cat parameter...
CVE-2007-0951
SQL injection vulnerability in listmain.asp in Fullaspsite ASP Hosting Site allows remote attackers to execute arbitrary SQL commands via the cat parameter...