257 matches found
CVE-2008-6348
Multiple SQL injection vulnerabilities in DevelopItEasy Photo Gallery 1.2 allow remote attackers to execute arbitrary SQL commands via the 1 catid parameter to gallerycategory.php, 2 photoid parameter to galleryphoto.php, and the 3 username and 4 userpass parameters to admin/index.php. NOTE: some...
CVE-2008-6348
Multiple SQL injection vulnerabilities in DevelopItEasy Photo Gallery 1.2 allow remote attackers to execute arbitrary SQL commands via the 1 catid parameter to gallerycategory.php, 2 photoid parameter to galleryphoto.php, and the 3 username and 4 userpass parameters to admin/index.php. NOTE: some...
CVE-2008-6209
SQL injection vulnerability in viewproduct.php in Vastal I-Tech Software Zone allows remote attackers to execute arbitrary SQL commands via the catid parameter...
Sql injection
SQL injection vulnerability in viewproduct.php in Vastal I-Tech Software Zone allows remote attackers to execute arbitrary SQL commands via the catid parameter...
CVE-2008-6209
SQL injection vulnerability in viewproduct.php in Vastal I-Tech Software Zone allows remote attackers to execute arbitrary SQL commands via the catid parameter...
Sql injection
SQL injection vulnerability in shopdisplayproducts.php in Script Toko Online 5.01 allows remote attackers to execute arbitrary SQL commands via the catid parameter...
Sql injection
SQL injection vulnerability in category.php in Flax Article Manager 1.1 allows remote attackers to execute arbitrary SQL commands via the catid parameter...
CVE-2009-0284
SQL injection vulnerability in category.php in Flax Article Manager 1.1 allows remote attackers to execute arbitrary SQL commands via the catid parameter...
Flax Article Manager 1.1 - cat_id SQL Injection
Flax Article Manager 1.1 - catid SQL Injection ------------------------------------------------------------------------- -- JIKO FroM No-exploit.Com --- ------------------------------------------------------------------------- Author : jiko email : [email protected] Home : www.no-exploit.Com...
CVE-2008-5802
CVE-2008-5802 affects the E-topbiz Online Store 1.0. The vulnerability is a SQL injection in index.php exploitable via the cat_id parameter, allowing remote attackers to execute arbitrary SQL commands. The connected documents confirm the issue but do not provide exploit details, patches, or speci...
CVE-2008-5287
SQL injection vulnerability in catagorie.php in Werner Hilversum FAQ Manager 1.2 allows remote attackers to execute arbitrary SQL commands via the catid parameter...
CVE-2008-5287
SQL injection vulnerability in catagorie.php in Werner Hilversum FAQ Manager 1.2 allows remote attackers to execute arbitrary SQL commands via the catid parameter...
faqmanager-sql.txt
+---------------------------------------------------------------------------------------+ | | | FAQ Manager 1.2 categorie.php catid Remote SQL Injection Vulnerability | | Bug found by cOndemned | | | | Script site : http://www.4yoursite.nl/scriptfaqmanager.php | | | | Greetz: ZaBeaTy, str0ke,...
SFS EZ Affiliate - cat_id SQL Injection
SFS EZ Affiliate - catid SQL Injection SFS EZ Affiliate catid Remote SQL Injection Vulnerability =============================================================== ---------------------------------------------------------------- Application : SFS EZ Affiliate Risk : High...
CVE-2008-4674
SQL injection vulnerability in realestate-index.php in Conkurent Real Estate Manager 1.01 allows remote attackers to execute arbitrary SQL commands via the catid parameter in browse mode...
CVE-2008-4674
The vulnerability CVE-2008-4674 affects Conkurent Real Estate Manager 1.01, with a SQL injection in the realestate-index.php file that accepts the cat_id parameter in browse mode. This allows remote attackers to execute arbitrary SQL commands. The connected documents confirm the issue and base im...
CVE-2008-4465
SQL injection vulnerability in viewmags.php in Vastal I-Tech DVD Zone allows remote attackers to execute arbitrary SQL commands via the catid parameter...
CVE-2008-4464
SQL injection vulnerability in viewmags.php in Vastal I-Tech Mag Zone allows remote attackers to execute arbitrary SQL commands via the catid parameter...