191 matches found
ExtCalendar 'cat_id' parameter SQL Injection
The version of the ExtCalendar installed on the remote host is affected by a SQL injection vulnerability. The application fails to properly sanitize user-supplied input to the 'catid' parameter of the 'calendar.php' script before using it in a database query. Regardless of PHP's 'magicquotesgpc'...
CVE-2010-0762
SQL injection vulnerability in index.php in CommodityRentals CD Rental Software allows remote attackers to execute arbitrary SQL commands via the catid parameter in a catalog action...
Sql injection
SQL injection vulnerability in index.php in CommodityRentals CD Rental Software allows remote attackers to execute arbitrary SQL commands via the catid parameter in a catalog action...
Sql injection
SQL injection vulnerability in download.php in Nicecoder iDesk allows remote attackers to execute arbitrary SQL commands via the catid parameter, a different vector than CVE-2005-3843...
CVE-2009-4624
SQL injection vulnerability in download.php in Nicecoder iDesk allows remote attackers to execute arbitrary SQL commands via the catid parameter, a different vector than CVE-2005-3843...
WordPress 1.5.1 Cat_ID参数SQL注入漏洞
No description provided by source...
Sql injection
SQL injection vulnerability in the Soundset comsoundset component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php...
CVE-2009-3595
SQL injection vulnerability in results.php in VS PANEL 7.5.5 allows remote attackers to execute arbitrary SQL commands via the CatID parameter, a different vector than CVE-2009-3590...
Sql injection
SQL injection vulnerability in results.php in VS PANEL 7.5.5 allows remote attackers to execute arbitrary SQL commands via the CatID parameter, a different vector than CVE-2009-3590...
Sql injection
SQL injection vulnerability in showcat.php in VS PANEL 7.3.6 allows remote attackers to execute arbitrary SQL commands via the CatID parameter...
CVE-2009-3590
SQL injection vulnerability in showcat.php in VS PANEL 7.3.6 allows remote attackers to execute arbitrary SQL commands via the CatID parameter...
Sql injection
Multiple SQL injection vulnerabilities in BPowerHouse BPGames 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 catid parameter to main.php and 2 gameid parameter to game.php...
Sql injection
Multiple SQL injection vulnerabilities in Videos Broadcast Yourself 2 allow remote attackers to execute arbitrary SQL commands via the 1 UploadID parameter to videoint.php, and possibly the 2 catid parameter to catvideo.php and 3 uid parameter to cviewchannels.php...
CVE-2009-2924
Multiple SQL injection vulnerabilities in Videos Broadcast Yourself 2 allow remote attackers to execute arbitrary SQL commands via the 1 UploadID parameter to videoint.php, and possibly the 2 catid parameter to catvideo.php and 3 uid parameter to cviewchannels.php...
Sql injection
SQL injection vulnerability in links.php in Scripts for Sites SFS EZ Link Directory allows remote attackers to execute arbitrary SQL commands via the catid parameter in a list action...
CVE-2008-6808
SQL injection vulnerability in links.php in Scripts for Sites SFS EZ Link Directory allows remote attackers to execute arbitrary SQL commands via the catid parameter in a list action...
Sql injection
SQL injection vulnerability in directory.php in Scripts For Sites SFS EZ Adult Directory allows remote attackers to execute arbitrary SQL commands via the catid parameter in a list action...
Sql injection
SQL injection vulnerability in directory.php in Scripts for Sites SFS SFS EZ Affiliate allows remote attackers to execute arbitrary SQL commands via the catid parameter in a list action...
Sql injection
SQL injection vulnerability in directory.php in Sites for Scripts SFS EZ Home Business Directory allows remote attackers to execute arbitrary SQL commands via the catid parameter in a list action...