191 matches found
CVE-2008-6784
SQL injection vulnerability in directory.php in Scripts For Sites SFS EZ Adult Directory allows remote attackers to execute arbitrary SQL commands via the catid parameter in a list action...
CVE-2008-6780
SQL injection vulnerability in directory.php in Scripts for Sites SFS SFS EZ Affiliate allows remote attackers to execute arbitrary SQL commands via the catid parameter in a list action...
CVE-2008-6782
SQL injection vulnerability in directory.php in Sites for Scripts SFS EZ Hosting Directory allows remote attackers to execute arbitrary SQL commands via the catid parameter in a list action...
CVE-2008-6784
SQL injection vulnerability in directory.php in Scripts For Sites SFS EZ Adult Directory allows remote attackers to execute arbitrary SQL commands via the catid parameter in a list action...
CVE-2008-6780
The CVE-2008-6780 entry describes an SQL injection vulnerability in directory.php of Scripts for Sites (SFS) EZ Affiliate. The issue allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in a list action. No version-specific details are provided in the documents. Publ...
VS PANEL 7.3.6 - 'Cat_ID' SQL Injection
+-------------------------------------+ + Homepage: http://www.vspanel.gr/ + Product: VS PANEL v.7.3.6 + File: showcat.php + Parameter: CatID + Dork: "Powered by VS PANEL" +-------------------------------------+ + SQL Injection: +...
VS PANEL 7.3.6 SQL Injection
+-------------------------------------+ + Homepage: http://www.vspanel.gr/ + Product: VS PANEL v.7.3.6 + File: showcat.php + Parameter: CatID + Dork: "Powered by VS PANEL" +-------------------------------------+ + SQL Injection: +...
CVE-2009-1315
Multiple cross-site scripting XSS vulnerabilities in AbleSpace 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 gid parameter to groupsprofile.php, 2 catid and 3 razdid parameters to advcat.php, and the 4 URL to blogsfull.php...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in AbleSpace 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 gid parameter to groupsprofile.php, 2 catid and 3 razdid parameters to advcat.php, and the 4 URL to blogsfull.php...
CVE-2009-1315
Multiple cross-site scripting XSS vulnerabilities in AbleSpace 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 gid parameter to groupsprofile.php, 2 catid and 3 razdid parameters to advcat.php, and the 4 URL to blogsfull.php...
CVE-2008-6526
SQL injection vulnerability in index.php in BosDev BosClassifieds allows remote attackers to execute arbitrary SQL commands via the catid parameter, a different vector than CVE-2008-1838...
Sql injection
SQL injection vulnerability in index.php in BosDev BosClassifieds allows remote attackers to execute arbitrary SQL commands via the catid parameter, a different vector than CVE-2008-1838...
CVE-2008-6526
SQL injection vulnerability in index.php in BosDev BosClassifieds allows remote attackers to execute arbitrary SQL commands via the catid parameter, a different vector than CVE-2008-1838...
CVE-2008-6348
Multiple SQL injection vulnerabilities in DevelopItEasy Photo Gallery 1.2 allow remote attackers to execute arbitrary SQL commands via the 1 catid parameter to gallerycategory.php, 2 photoid parameter to galleryphoto.php, and the 3 username and 4 userpass parameters to admin/index.php. NOTE: some...
CVE-2008-6209
SQL injection vulnerability in viewproduct.php in Vastal I-Tech Software Zone allows remote attackers to execute arbitrary SQL commands via the catid parameter...
Sql injection
SQL injection vulnerability in viewproduct.php in Vastal I-Tech Software Zone allows remote attackers to execute arbitrary SQL commands via the catid parameter...
CVE-2008-6209
SQL injection vulnerability in viewproduct.php in Vastal I-Tech Software Zone allows remote attackers to execute arbitrary SQL commands via the catid parameter...
Sql injection
SQL injection vulnerability in shopdisplayproducts.php in Script Toko Online 5.01 allows remote attackers to execute arbitrary SQL commands via the catid parameter...