Joomla! Component com_rand - SQL Injection

Joomla! Component comrand - SQL Injection Exploit Title : Joomla Spider Random Article Component SQL Injection vulnerability Author : Jagriti Sahu AKA Incredible Vendor Link : http://demo.web-dorado.com/spider-random-article.html Date : 22/03/2015 Discovered at : IndiShell Lab Love to : error1046...

ETouch Systems SamePage Enterprise Edition SQL Injection Vulnerability

ETouch Systems SamePage Enterprise Edition is an enterprise version of the Wiki WiKi solution for wikis and blogs from ETouch Systems, USA. The solution supports team collaboration, role management and document management. An SQL injection vulnerability exists in ETouch Systems SamePage Enterpris...

Sql injection

SQL injection vulnerability in ChangeEmail.php in iTechClassifieds 3.03.057 allows remote attackers to execute arbitrary SQL commands via the PreviewNum parameter. NOTE: the CatID parameter is already covered by CVE-2008-0685...

CVE-2014-100020

SQL injection vulnerability in ChangeEmail.php in iTechClassifieds 3.03.057 allows remote attackers to execute arbitrary SQL commands via the PreviewNum parameter. NOTE: the CatID parameter is already covered by CVE-2008-0685...

CTS Projects & Software ClassAd SQL Injection Vulnerability

CTS Projects & Software ClassAd is an online advertising application. The CTS Projects & Software ClassAd showads.php script does not properly filter the catid parameter, allowing remote attackers to exploit the vulnerability by submitting specially crafted SQL queries to manipulate or obtain...

CVE-2014-9455

SQL injection vulnerability in showads.php in CTS Projects & Software ClassAd 3.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2014-9455

SQL injection vulnerability in showads.php in CTS Projects & Software ClassAd 3.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

Dashing Times SQL Injection

dashing times cms scripts, sql injection vulnerability. products page: http://www.dashingtimes.in/portfolio/ authorpentester: 3spi0n on social: twitter.com/eyyamgudeer description i found vulnerability all cms scripts of dashingtimes web design. some weak websites + categories.php, catid param...

CVE-2014-4741

SQL injection vulnerability in demo/ads.php in Artifectx xClassified 1.2 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

Sql injection

SQL injection vulnerability in demo/ads.php in Artifectx xClassified 1.2 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

Joomla! 'com_as' Component 'catid' Parameter SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/38757/info The 'comas' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...

Joomla Component com_question - SQL Injection Vulnerability

No description provided by source. |Title : Joomla comquestion SQL Injection Vulnerability |Vendor : http://www.alex-ensdorf.de/ |Version : Joomla 1.5 |Date : 15/5/2011 |Author : NeX HaCkEr |Contact : [email protected] | Exploit : | http://localhost/Joomla/index.php/?option=comquestion&catID=S...

DELTAScripts PHPLinks (catid) SQL Injection Vulnerability

No description provided by source. / Name : DELTAScripts PHPLinks Vuln : SQL Injection Author : Hamza 'MizoZ' N. Email : mizozxatgmaildotcom WebSite : www.greymen.orghttp://www.greymen.org/ Greetz : Zuka, all friends & arab hackers / Vulnerability is in the $GET'catid'...

Wbb3 - Blind SQL Injection Vulnerability

No description provided by source. !/usr/bin/perl -w use strict; use LWP::Simple; $| = 1; print q ----------------------------------------------- Wbb3 Blind Sql Injection Injection in Announce Plugin Kleinanzeigen Markt Coded By Molli use: ano.pl url user id Announce Catid Google:...

ITechClassifieds ViewCat.php CatID Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/27574/info iTechClassifieds is prone to an input-validation vulnerability that may be exploited as a cross-site scripting issue or an SQL-injection issue. This issue occurs because the application fails to adequately...

D3Jeeb Pro 3 fastlinks.php catid Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/16853/info D3Jeeb is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation...

Techfolio 1.0 Joomla Component SQL Injection Vulnerability

No description provided by source. Techfolio 1.0 Component Joomla SQL Injection Release Date Bug. 27-Oct-2011 Date Added. 30-Sep-2011 Vendor Notification Date. Never Product. Techfolio Platform. Joomla Affected versions. 1.0 Type. Non-Commercial Attack Vector. Sql Injection Solution Status...

Joomla Joomanager SQL Injection Vulnerability

No description provided by source. Note from the vendor received 10Mar11: The old code was using JReguest::GetVar and we change it to JReguest::GetInt so the catid must be an integer only and not text. We updated this over 6 months ago in version 1.1.1 1 1 0 I'm Sid3^effects member from Inj3ct0r...

iTechClassifieds 3.03.057 - SQL Injection

No description provided by source. Exploit Title: iTechClassifieds v3.03.057 - SQL Injection Date: 23/01/2014 Exploit Author: vinicius777 Vendor Homepage: http://itechscripts.com/download.html Software Link: http://itechscripts.com/downloads/downloaditechclassifieds.html Version: 3.03.057 1 SQL...

Kmita FAQ 1.0 index.php catid Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/18282/info Kmita FAQ is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly...