313 matches found
Sql injection
Multiple SQL injection vulnerabilities in Mobilelib GOLD 3 allow remote attackers to execute arbitrary SQL commands via the 1 adminName parameter to cp/auth.php, 2 cid parameter to artcat.php, and 3 catid parameter to show.php...
CVE-2009-2776
SQL injection vulnerability in showresult.asp in Smart ASP Survey allows remote attackers to execute arbitrary SQL commands via the catid parameter...
CVE-2009-2776
SQL injection vulnerability in showresult.asp in Smart ASP Survey allows remote attackers to execute arbitrary SQL commands via the catid parameter...
Sql injection
SQL injection vulnerability in the amoCourse comamocourse component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a category action to index.php...
CVE-2009-2609
SQL injection vulnerability in the amoCourse comamocourse component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a category action to index.php...
CVE-2009-2394
SQL injection vulnerability in cat.php in SMSPages 1.0 in Mr.Saphp Arabic Script Mobile aka Messages Library 2.0 allows remote attackers to execute arbitrary SQL commands via the CatID parameter...
CVE-2009-2394
CVE-2009-2394 describes an SQL injection in cat.php of SMSPages 1.0 (Mr.Saphp Arabic Script Mobile 2.0). The vulnerability arises from unsafely handling the CatID parameter, allowing remote attackers to execute arbitrary SQL commands. Affected software is explicitly named as SMSPages 1.0 in Mr.Sa...
Sql injection
SQL injection vulnerability in the Ice Gallery comice component 0.5 beta 2 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php...
Sql injection
SQL injection vulnerability in insidepage.php in Creative Web Solutions Multi-Level CMS 1.21 allows remote attackers to execute arbitrary SQL commands via the catid parameter. NOTE: some of these details are obtained from third party information...
CVE-2009-2082
SQL injection vulnerability in insidepage.php in Creative Web Solutions Multi-Level CMS 1.21 allows remote attackers to execute arbitrary SQL commands via the catid parameter. NOTE: some of these details are obtained from third party information...
CVE-2009-1734
SQL injection vulnerability in listingvideo.php in VidSharePro allows remote attackers to execute arbitrary SQL commands via the catid parameter...
Sql injection
SQL injection vulnerability in the GridSupport GS Ticket System comgsticketsystem component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a viewCategory action to index.php...
Sql injection
SQL injection vulnerability in listingvideo.php in VidSharePro allows remote attackers to execute arbitrary SQL commands via the catid parameter...
CVE-2009-1736
The CVE-2009-1736 issue affects Joomla! GridSupport (GS) Ticket System (com_gsticketsystem). The underlying vulnerability is an SQL injection in the viewCategory action, where the catid parameter to index.php can be manipulated to execute arbitrary SQL commands. The documents confirm remote‑level...
CVE-2008-6653
SQL injection vulnerability in webhosting.php in the Webhosting Component comwebhosting module before 1.1 RC7 for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php...
Sql injection
SQL injection vulnerability in choosecard.php in WEBBDOMAIN Post Card aka Web Postcards 1.02, 1.01, and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter...
Sql injection
Multiple SQL injection vulnerabilities in Social Site Generator SSG 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 sgcid parameter to displayblog.php, 2 scmmemid parameter to socialmyprofiledownload.php, and the 3 catid parameter to socialforumsubcategories.php...
Sql injection
SQL injection vulnerability in the OwnBiblio comownbiblio component 1.5.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a catalogue action to index.php...
CVE-2009-0574
SQL injection vulnerability in index.php in Easy CafeEngine allows remote attackers to execute arbitrary SQL commands via the catid parameter, a different vector than CVE-2008-4604...
Sql injection
SQL injection vulnerability in index.php in Easy CafeEngine allows remote attackers to execute arbitrary SQL commands via the catid parameter, a different vector than CVE-2008-4604...