Limbo weblinks.html.php catid Parameter SQL Injection

The remote host is running Limbo CMS, a content-management system written in PHP. The version of Limbo CMS installed on the remote host fails to sanitize input to the 'catid' parameter of the 'index.php' script before using it in a database query. An unauthenticated attacker may be able to levera...

Sql injection

Multiple SQL injection vulnerabilities in EImagePro allow remote attackers to execute arbitrary SQL commands via the 1 CatID parameter to subList.asp, 2 SubjectID parameter to imageList.asp, or 3 Pic parameter to view.asp...

Sql injection

SQL injection vulnerability in plexcart.pl in NicPlex PlexCart X3 and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2006-1949

CVE-2006-1949 affects NicPlex PlexCart X3 and earlier. A SQL injection vulnerability exists in plexcart.pl, exploitable via the catid parameter, allowing remote attackers to execute arbitrary SQL commands. The NVD entry records impact as partial confidentiality/integrity/availability with network...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in viewcaricatier.php in AL-Caricatier 2.5 allow remote attackers to inject arbitrary web script or HTML via the 1 CatName, 2 CaricatierID, or 3 CatID parameter...

Sql injection

SQL injection vulnerability in D3Jeeb Pro 3 allows remote attackers to execute arbitrary SQL commands via the catid parameter in 1 fastlinks.php and 2 catogary.php...

CVE-2006-0906

CVE-2006-0906 describes an SQL injection vulnerability in D3Jeeb Pro 3. The flaw allows remote attackers to execute arbitrary SQL commands through the catid parameter in the files fastlinks.php and catogary.php. This is documented across multiple sources (NVD and related records) and is classifie...

CVE-2006-0906

SQL injection vulnerability in D3Jeeb Pro 3 allows remote attackers to execute arbitrary SQL commands via the catid parameter in 1 fastlinks.php and 2 catogary.php...

CVE-2005-4262

Cross-site scripting XSS vulnerability in the News module in Envolution allows remote attackers to inject arbitrary web script or HTML via the 1 startrow and 2 catid parameter. NOTE: this issue might be resultant from the SQL injection problem CVE-2005-4263...

CVE-2005-3978

Multiple SQL injection vulnerabilities in NetClassifieds Premium Edition, Professional Edition, Standard Edition, and Free Edition allow remote attackers to execute arbitrary SQL via (1) CatID in ViewCat.php and gallery.php and (2) ItemNum in ViewItem.php. Affected versions: Premium 1.0.1, Profes...

CVE-2005-3696

SQL injection vulnerability in Arki-DB 1.0 and 2.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter in a view action view.php to index.php...

CVE-2005-2062

CVE-2005-2062 affects ActiveBuyAndSell 6.2. Multiple SQL injection vulnerabilities allow remote attackers to execute arbitrary SQL commands via the catid parameter to (1) default.asp or (2) buyersend.asp, (3) Administrator ID field in admin.asp, E-mail field in (4) advertiserstart.asp or (5) buye...

CVE-2005-1079

The CVE-2005-1079 entry describes a SQL injection in zOOm Media Gallery 2.1.2 through the catid parameter in index.php, allowing remote attackers to execute arbitrary SQL commands. Affected software: zOOm Media Gallery 2.1.2 (index.php vulnerability in catid). Root cause: unsafely concatenated us...

CVE-2005-1079

SQL injection vulnerability in index.php for zOOm Media Gallery 2.1.2 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2004-1972

SQL injection vulnerability in modules.php in PHP-Nuke Video Gallery Module 0.1 Beta 5 allows remote attackers to execute arbitrary SQL code via the 1 clipid or 2 catid parameters in a viewclip, viewcat, or voteclip action...