CVE-2014-9455

SQL injection vulnerability in showads.php in CTS Projects & Software ClassAd 3.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2014-9455

SQL injection vulnerability in showads.php in CTS Projects & Software ClassAd 3.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

Dashing Times SQL Injection

dashing times cms scripts, sql injection vulnerability. products page: http://www.dashingtimes.in/portfolio/ authorpentester: 3spi0n on social: twitter.com/eyyamgudeer description i found vulnerability all cms scripts of dashingtimes web design. some weak websites + categories.php, catid param...

CVE-2014-4741

SQL injection vulnerability in demo/ads.php in Artifectx xClassified 1.2 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

Sql injection

SQL injection vulnerability in demo/ads.php in Artifectx xClassified 1.2 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

Wbb3 - Blind SQL Injection Vulnerability

No description provided by source. !/usr/bin/perl -w use strict; use LWP::Simple; $| = 1; print q ----------------------------------------------- Wbb3 Blind Sql Injection Injection in Announce Plugin Kleinanzeigen Markt Coded By Molli use: ano.pl url user id Announce Catid Google:...

Joomla! 'com_as' Component 'catid' Parameter SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/38757/info The 'comas' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...

DELTAScripts PHPLinks (catid) SQL Injection Vulnerability

No description provided by source. / Name : DELTAScripts PHPLinks Vuln : SQL Injection Author : Hamza 'MizoZ' N. Email : mizozxatgmaildotcom WebSite : www.greymen.orghttp://www.greymen.org/ Greetz : Zuka, all friends & arab hackers / Vulnerability is in the $GET'catid'...

Joomla Component com_question - SQL Injection Vulnerability

No description provided by source. |Title : Joomla comquestion SQL Injection Vulnerability |Vendor : http://www.alex-ensdorf.de/ |Version : Joomla 1.5 |Date : 15/5/2011 |Author : NeX HaCkEr |Contact : [email protected] | Exploit : | http://localhost/Joomla/index.php/?option=comquestion&catID=S...

ITechClassifieds ViewCat.php CatID Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/27574/info iTechClassifieds is prone to an input-validation vulnerability that may be exploited as a cross-site scripting issue or an SQL-injection issue. This issue occurs because the application fails to adequately...

Kmita FAQ 1.0 index.php catid Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/18282/info Kmita FAQ is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly...

iTechClassifieds 3.03.057 - SQL Injection

No description provided by source. Exploit Title: iTechClassifieds v3.03.057 - SQL Injection Date: 23/01/2014 Exploit Author: vinicius777 Vendor Homepage: http://itechscripts.com/download.html Software Link: http://itechscripts.com/downloads/downloaditechclassifieds.html Version: 3.03.057 1 SQL...

D3Jeeb Pro 3 fastlinks.php catid Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/16853/info D3Jeeb is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation...

Techfolio 1.0 Joomla Component SQL Injection Vulnerability

No description provided by source. Techfolio 1.0 Component Joomla SQL Injection Release Date Bug. 27-Oct-2011 Date Added. 30-Sep-2011 Vendor Notification Date. Never Product. Techfolio Platform. Joomla Affected versions. 1.0 Type. Non-Commercial Attack Vector. Sql Injection Solution Status...

Joomla Joomanager SQL Injection Vulnerability

No description provided by source. Note from the vendor received 10Mar11: The old code was using JReguest::GetVar and we change it to JReguest::GetInt so the catid must be an integer only and not text. We updated this over 6 months ago in version 1.1.1 1 1 0 I'm Sid3^effects member from Inj3ct0r...

iTechClassifieds 3.03.057 - SQL Injection

iTechClassifieds 3.03.057 - SQL Injection Exploit Title: iTechClassifieds v3.03.057 - SQL Injection Date: 23/01/2014 Exploit Author: vinicius777 Vendor Homepage: http://itechscripts.com/download.html Software Link: http://itechscripts.com/downloads/downloaditechclassifieds.html Version: 3.03.057 ...

iTechClassifieds 3.03.057 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: iTechClassifieds v3.03.057 - SQL Injection Date: 23/01/2014 Exploit Author: vinicius777 Vendor Homepage: http://itechscripts.com/download.html Software Link: http://itechscripts.com/downloads/downloaditechclassifieds.html Versio...

iTechClassifieds 3.03.057 - SQL Injection

Exploit Title: iTechClassifieds v3.03.057 - SQL Injection Date: 23/01/2014 Exploit Author: vinicius777 Vendor Homepage: http://itechscripts.com/download.html Software Link: http://itechscripts.com/downloads/downloaditechclassifieds.html Version: 3.03.057 1 SQL Injection - PreviewNun PoC:...

CVE-2011-5113

SQL injection vulnerability in frontend/models/techfoliodetail.php in Techfolio comtechfolio component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter...

Joomla! Component com_crhotels - catid SQL Injection

Joomla! Component comcrhotels - catid SQL Injection source: https://www.securityfocus.com/bid/51728/info The 'comcrhotels' component for Joomla! is prone to a remote SQL injection vulnerability. A successful exploit may allow an attacker to compromise the application, access or modify data, or...