CVE-2002-2321

Cross-site scripting XSS vulnerability in 1 showcat.php and 2 addyoursite.php in phpLinkat 0.1.0 allows remote attackers to inject arbitrary web script or HTML via the catid parameter...

CVE-2008-0685

SQL injection vulnerability in ViewCat.php in iTechClassifieds 3.0 allows remote attackers to execute arbitrary SQL commands via the CatID parameter...

Founder Electronics Enjoys All-Media Acquisition and Editing System 注入漏洞

Founder Electronics Enjoys All-Media Acquisition and Editing System is an all-media acquisition and editing system from China's Founder Electronics. An injection vulnerability exists in Founder Electronics Enjoys All-Media Acquisition and Editing System version 3.0, which stems from an incorrect...

CVE-2024-12285

CVE-2024-12285 affects the SEMA API WordPress plugin. It describes a Reflected Cross-Site Scripting vulnerability via the catid parameter caused by insufficient input sanitization and output escaping. Attackers could exploit this without authentication to inject web scripts in pages rendered when...

CVE-2024-12285 SEMA API <= 5.27 - Reflected Cross-Site Scripting via catid Parameter

The SEMA API plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘catid’ parameter in all versions up to, and including, 5.27 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts i...

WordPress SEMA API plugin <= 5.27 - Reflected Cross-Site Scripting via catid Parameter vulnerability

Reflected Cross-Site Scripting via catid Parameter vulnerability discovered by vgo0 in WordPress Plugin SEMA API versions = 5.27...

WordPress plugin SEMA API 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripti...

CVE-2024-12950

A vulnerability was found in code-projects/projectworlds Travel Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /subcat.php. The manipulation of the argument catid leads to sql injection. The attack may be initiated remotely. The exploi...

Travel Management System 注入漏洞

Travel Management System is an open source travel management system from Code-Projects. An injection vulnerability exists in Travel Management System version 1.0, which stems from an incorrect manipulation of the parameter catid that can lead to sql injection...

CVE-2022-30481

Food-order-and-table-reservation-system- 1.0 is vulnerable to SQL Injection in categorywise-menu.php via the catid parameters...

CVE-2022-30481

Food-order-and-table-reservation-system- 1.0 is vulnerable to SQL Injection in categorywise-menu.php via the catid parameters...

Food-order-and-table-reservation-system SQL注入漏洞

Food-order-and-table-reservation-system is enabling users to order food online and reserve a table for dine-in if there is no delivery option. food-order-and-table-reservation-system version 1.0 is vulnerable to an SQL injection vulnerability that originates in the categorywise-menu.php page wher...

PT-2022-20137 · Unknown · Food-Order-And-Table-Reservation-System

Name of the Vulnerable Software and Affected Versions: Food-order-and-table-reservation-system- version 1.0 Description: The issue concerns a SQL Injection vulnerability in the categorywise-menu.php file, specifically via the catid parameter. This allows for potential exploitation. Recommendation...

The vulnerability of the catID parameter in the Pharmacy Medical Store And Sale Point medical software, related to the lack of measures to protect the SQL query structure, allows attackers to execute arbitrary SQL commands and gain access to confidential data.

The vulnerability of the catID parameter in the medical software Pharmacy Medical Store And Sale Point is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary SQL commands and gain access to confidential da...

CVE-2021-25213

SQL injection vulnerability in SourceCodester Travel Management System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the catid parameter to subcat.php...

Sql injection

SQL injection vulnerability in SourceCodester Travel Management System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the catid parameter to subcat.php...

CVE-2021-25213

CVE-2021-25213 affects SourceCodester Travel Management System v1.0. The entry documents an SQL injection vulnerability exploitable remotely via the catid parameter to subcat.php, allowing arbitrary SQL execution with high impact (CVSS v3.1: 9.8). The root cause is improper handling of user-suppl...

CVE-2021-25213

SQL injection vulnerability in SourceCodester Travel Management System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the catid parameter to subcat.php...

SourceCodester Travel Management System SQL注入漏洞

SourceCodester Travel Management System is a software application. An automated system designed to help customers easily check their parcel details as well as help travel companies track parcels online. SourceCodester Travel Management System v 1.0 suffers from a SQL injection vulnerability that...

CVE-2020-24862

The catID parameter in Pharmacy Medical Store and Sale Point v1.0 has been found to be vulnerable to a Time-Based blind SQL injection via the /medical/inventories.php path which allows attackers to retrieve all databases...