CVE-2020-12708

PHP-Fusion 9.03.50 is affected by multiple cross-site scripting (XSS) vulnerabilities that allow remote attackers to inject arbitrary script or HTML via the cat_id parameter to downloads/downloads.php or article.php. The issue is a result of insufficient input validation in these endpoints and is...

CVE-2015-9462

The awesome-filterable-portfolio plugin before 1.9 for WordPress has afpgetnewcategorypage SQL injection via the catid parameter...

Website Auction Marketplace SQL Injection Vulnerability

Website Auction Marketplace is a software for creating e-commerce websites. A SQL injection vulnerability exists in Website Auction Marketplace version 2.0.5. The vulnerability can be exploited by remote attackers to inject SQL commands by sending the 'catid' parameter to the search.php file...

CVE-2017-17592

Website Auction Marketplace 2.0.5 has SQL Injection via the search.php catid parameter...

CVE-2017-17592

Website Auction Marketplace 2.0.5 has SQL Injection via the search.php catid parameter...

Sql injection

Website Auction Marketplace 2.0.5 has SQL Injection via the search.php catid parameter...

CVE-2017-17592

Website Auction Marketplace 2.0.5 contains an SQL injection in the search.php cat_id parameter. The issue allows remote attackers to manipulate SQL queries, enabling potential data leakage or modification (per sources listed). The CVE is corroborated by multiple databases (NVD, CNVD, CVE.gov) wit...

CVE-2015-4678

SQL injection vulnerability in Persian Car CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter to the default URI...

Sql injection

SQL injection vulnerability in Persian Car CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter to the default URI...

CVE-2015-4678

SQL injection vulnerability in Persian Car CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter to the default URI...

WordPress Plugin Spider Event Calendar SQL Injection Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language , the platform supports in PHP and MySQL server to set up a personal blog site . Spider Event Calendar is one of the highly configurable calendar plugin . A SQL injection vulnerability exist...

Sql injection

SQL injection vulnerability in Spider Event Calendar 1.4.9 for WordPress allows remote attackers to execute arbitrary SQL commands via the catid parameter in a spiderbigcalendarmonth action to wp-admin/admin-ajax.php...

CVE-2015-2196

The CVE-2015-2196 issue affects WordPress Spider Event Calendar plugin (versions up to 1.4.9). The vulnerability arises in the spiderbigcalendar_month action when processing the cat_id parameter in wp-admin/admin-ajax.php, allowing an attacker to perform SQL injection. Impact described across sou...

glFusion 1.3.0 (search.php, cat_id param) - SQL Injection

No description provided by source...

Cross site scripting

Cross-site scripting XSS vulnerability in downloads.php in PHP-Fusion 7.02.04 allows remote attackers to inject arbitrary web script or HTML via the catid parameter...

CVE-2012-6043

Cross-site scripting XSS vulnerability in downloads.php in PHP-Fusion 7.02.04 allows remote attackers to inject arbitrary web script or HTML via the catid parameter...

CVE-2010-4770

SQL injection vulnerability in index.php in CommodityRentals DVD Rentals Script allows remote attackers to execute arbitrary SQL commands via the catid parameter in a catalog action...

Sql injection

SQL injection vulnerability in index.php in CommodityRentals DVD Rentals Script allows remote attackers to execute arbitrary SQL commands via the catid parameter in a catalog action...

CVE-2010-4770

SQL injection vulnerability in index.php in CommodityRentals DVD Rentals Script allows remote attackers to execute arbitrary SQL commands via the catid parameter in a catalog action...

CVE-2010-4770

CVE-2010-4770 is a SQL injection vulnerability in the CommodityRentals DVD Rentals Script, exposed via index.php in the catalog action. The issue allows remote attackers to execute arbitrary SQL commands through the cat_id parameter. Documents confirm the affected software component is the script...