CVE-2006-0249: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in viewcat.php in BitDamaged geoBlog MOD1.0 allows remote attackers to execute arbitrary SQL commands, then steal credentials and upload files, via the cat parameter $tmpCategory variable...

CVE-2006-0237: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in GTP iCommerce allows remote attackers to inject arbitrary web script or HTML via the 1 cat and 2 subcat parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-0109

Cross-site scripting vulnerability in category.php in Modular Merchant Shopping Cart allows remote attackers to inject arbitrary web script or HTML via the cat parameter...

CVE-2006-0109: Undefined Security Weakness

Cross-site scripting vulnerability in category.php in Modular Merchant Shopping Cart allows remote attackers to inject arbitrary web script or HTML via the cat parameter...

CVE-2006-0093

Cross-site scripting XSS vulnerability in index.php in @Card ME PHP allows remote attackers to inject arbitrary web script or HTML via the cat parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in @Card ME PHP allows remote attackers to inject arbitrary web script or HTML via the cat parameter...

CVE-2006-0093

Cross-site scripting XSS vulnerability in index.php in @Card ME PHP allows remote attackers to inject arbitrary web script or HTML via the cat parameter...

CVE-2006-0093: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in @Card ME PHP allows remote attackers to inject arbitrary web script or HTML via the cat parameter...

Night cat article system Version 2.1.0 cross site & injection vulnerability-vulnerability warning-the black bar safety net

Articles have been published in thehack the x-Files2 0 0 6 in the first period Cross-site vulnerability: night cat article system code amount is not very large, then we will from the most basic to start it, open the registration page to register. php see the following code if $POSTaction ==...

Sick cats regardless of the home-the spare ADSL cats initiate network attacks-vulnerability warning-the black bar safety net

Some time ago the home installation of a telecommunications broadband, and the use of the gift of the terminal device with a routing function of the cat, and was only allowed dial-up Internet, and later still there every time you dial a lot of trouble, simply do it yourself in the cat configurati...

CVE-2005-4485

Multiple cross-site scripting XSS vulnerabilities in ProjectApp 3.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the keywords parameter to 1 forums.asp, 2 searchemployees.asp, 3 cat.asp, and 4 links.asp; 5 projectid parameter to pmprojects.asp, 6 retpage parameter...

CVE-2005-4355

Multiple cross-site scripting XSS vulnerabilities in UStore allow remote attackers to inject arbitrary web script or HTML via the 1 Cat parameter in default.asp and the 2 accessdenied parameter in admin/default.asp. NOTE: the provenance of this information is unknown; the details are obtained...

CVE-2005-4355: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in UStore allow remote attackers to inject arbitrary web script or HTML via the 1 Cat parameter in default.asp and the 2 accessdenied parameter in admin/default.asp. NOTE: the provenance of this information is unknown; the details are obtained...

CVE-2005-4359: Undefined Security Weakness

SQL injection vulnerability in includes/core.inc.php in ODFaq 2.1.0 allows remote attackers to execute arbitrary SQL commands via the 1 cat and 2 srcText parameters to faq.php...

CVE-2005-4419: Undefined Security Weakness

Multiple SQL injection vulnerabilities in CategoryResults.cfm in Honeycomb Archive and Honeycomb Archive Enterprise 3.0 allow remote attackers to execute arbitrary SQL commands via the 1 series, 2 catparent, 3 cat, and 4 div parameters...

PT-2005-4920 · Jamit · Jamit Job Board

Name of the Vulnerable Software and Affected Versions: Jamit Job Board versions 2.4.1 and earlier Description: A SQL injection issue allows remote attackers to execute arbitrary SQL commands via the cat parameter in the "index.php" file. The vendor has disputed this issue, claiming it has no basi...

CVE-2005-4232: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Jamit Job Board 2.4.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cat parameter. NOTE: the vendor has disputed this issue, saying "The vulnerability is without any basis and did not actually work." CVE has not verified...

CVE-2005-4198

SQL injection vulnerability in index.php in Netref 3.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter. NOTE: the provenance of this issue is unknown; the details were obtained solely from third party sources...

CVE-2005-4198: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Netref 3.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter. NOTE: the provenance of this issue is unknown; the details were obtained solely from third party sources...

CVE-2005-4075

Multiple cross-site scripting XSS vulnerabilities in index.cfm in CFNuke 4.6 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 topic and 2 newsid parameter in the news sector, and 3 cat parameter in the links sector...