405 matches found
ProPublish 2.0 (catid) Remote SQL Injection Vulnerability
No description provided by source. ProPublish 2.0 catid Remote SQL Injection Vulnerability Thanks to soot : http://www.securityfocus.com/archive/1/435787/30/0/threaded Exploited by FarhadKey from kapda.ir Exploit :...
CVE-2006-2696
Cross-site scripting XSS vulnerabilities in Easy-Content Forums 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 startletter parameter in userview.asp and the 2 catid parameter in topics.asp...
Sql injection
SQL injection vulnerability in the weblinks option weblinks.html.php in Limbo CMS allows remote attackers to execute arbitrary SQL commands via the catid parameter...
CVE-2006-2363
SQL injection vulnerability in the weblinks option weblinks.html.php in Limbo CMS allows remote attackers to execute arbitrary SQL commands via the catid parameter...
CVE-2006-2363
SQL injection vulnerability in the weblinks option weblinks.html.php in Limbo CMS allows remote attackers to execute arbitrary SQL commands via the catid parameter...
CVE-2006-2363
CVE-2006-2363 affects Limbo CMS via the weblinks option (weblinks.html.php). The vulnerability is a SQL injection in the catid parameter that can allow an unauthenticated attacker to influence database queries, potentially exposing password hashes when Limbo uses MySQL. Exploitation details and i...
Limbo weblinks.html.php catid Parameter SQL Injection
The remote host is running Limbo CMS, a content-management system written in PHP. The version of Limbo CMS installed on the remote host fails to sanitize input to the 'catid' parameter of the 'index.php' script before using it in a database query. An unauthenticated attacker may be able to levera...
Sql injection
Multiple SQL injection vulnerabilities in EImagePro allow remote attackers to execute arbitrary SQL commands via the 1 CatID parameter to subList.asp, 2 SubjectID parameter to imageList.asp, or 3 Pic parameter to view.asp...
CVE-2006-2300
Multiple SQL injection vulnerabilities in EImagePro allow remote attackers to execute arbitrary SQL commands via the 1 CatID parameter to subList.asp, 2 SubjectID parameter to imageList.asp, or 3 Pic parameter to view.asp...
Sql injection
SQL injection vulnerability in plexcart.pl in NicPlex PlexCart X3 and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter...
CVE-2006-1949
CVE-2006-1949 affects NicPlex PlexCart X3 and earlier. A SQL injection vulnerability exists in plexcart.pl, exploitable via the catid parameter, allowing remote attackers to execute arbitrary SQL commands. The NVD entry records impact as partial confidentiality/integrity/availability with network...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in viewcaricatier.php in AL-Caricatier 2.5 allow remote attackers to inject arbitrary web script or HTML via the 1 CatName, 2 CaricatierID, or 3 CatID parameter...
CVE-2006-1556
Multiple cross-site scripting XSS vulnerabilities in viewcaricatier.php in AL-Caricatier 2.5 allow remote attackers to inject arbitrary web script or HTML via the 1 CatName, 2 CaricatierID, or 3 CatID parameter...
Sql injection
SQL injection vulnerability in D3Jeeb Pro 3 allows remote attackers to execute arbitrary SQL commands via the catid parameter in 1 fastlinks.php and 2 catogary.php...
CVE-2006-0906
SQL injection vulnerability in D3Jeeb Pro 3 allows remote attackers to execute arbitrary SQL commands via the catid parameter in 1 fastlinks.php and 2 catogary.php...
CVE-2006-0906
CVE-2006-0906 describes an SQL injection vulnerability in D3Jeeb Pro 3. The flaw allows remote attackers to execute arbitrary SQL commands through the catid parameter in the files fastlinks.php and catogary.php. This is documented across multiple sources (NVD and related records) and is classifie...
CVE-2005-4262
Cross-site scripting XSS vulnerability in the News module in Envolution allows remote attackers to inject arbitrary web script or HTML via the 1 startrow and 2 catid parameter. NOTE: this issue might be resultant from the SQL injection problem CVE-2005-4263...
CVE-2005-4262
Cross-site scripting XSS vulnerability in the News module in Envolution allows remote attackers to inject arbitrary web script or HTML via the 1 startrow and 2 catid parameter. NOTE: this issue might be resultant from the SQL injection problem CVE-2005-4263...
CVE-2005-3978
Multiple SQL injection vulnerabilities in NetClassifieds Premium Edition, Professional Edition, Standard Edition, and Free Edition allow remote attackers to execute arbitrary SQL via (1) CatID in ViewCat.php and gallery.php and (2) ItemNum in ViewItem.php. Affected versions: Premium 1.0.1, Profes...