CVE-2008-0685

SQL injection vulnerability in ViewCat.php in iTechClassifieds 3.0 allows remote attackers to execute arbitrary SQL commands via the CatID parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in ViewCat.php in iTechClassifieds 3.0 allows remote attackers to inject arbitrary web script or HTML via the CatID parameter...

Sql injection

SQL injection vulnerability in index.php in the Marketplace commarketplace 1.1.1 and 1.1.1-pl1 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a showcategory action...

CVE-2008-0689

SQL injection vulnerability in index.php in the Marketplace commarketplace 1.1.1 and 1.1.1-pl1 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a showcategory action...

CVE-2008-0684

CVE-2008-0684 documents a cross-site scripting (XSS) vulnerability in ViewCat.php of iTechClassifieds 3.0, exploitable via the CatID parameter to inject arbitrary web script/HTML. The root cause is lack of proper input validation/sanitization in Category ID handling, allowing attacker-supplied in...

CVE-2008-0686

CVE-2008-0686 affects Joomla! via the NeoReferences (com_neoreferences) component versions 1.3.1 and 1.3.3. The root cause is a SQL injection in index.php triggered by the catid parameter, allowing remote attackers to execute arbitrary SQL commands. The vulnerability exposes a partial confidentia...

Sql injection

SQL injection vulnerability in index.php in the Sigsiu Online Business Index 2 SOBI2, comsobi2 2.5.3 component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the catid parameter. NOTE: the provenance of this information is unknown; the details are obtained...

PT-2008-2232 · Mambo Foundation +2 · Mambo +2

Name of the Vulnerable Software and Affected Versions: com sobi2 version 2.5.3 Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the catid parameter in the index.php file of the com sobi2 component for Joomla! and Mambo. Recommendations: For...

Joomla! Component com_Marketplace 1.1.1 - SQL Injection

Joomla Component Markplace 1.1.1 Remote Sql Injection Exploit AUTHOR:SoSo H H Iraqi-Cracker Tested on: Markplace Version 1.1.1 and 1.1.1-pl1 Dork:"Marketplace Version 1.1.1" "Marketplace Version 1.1.1-pl1" inurl:index.php?option=commarketplace Exploit in:...

Joomla! Component NeoReferences 1.3.1 - catid SQL Injection

Joomla! Component NeoReferences 1.3.1 - catid SQL Injection joomla SQL Injectioncomneoreferences AUTHOR : S@BUN HOME : http://www.hackturkiye.com/ DorKs 1 : allinurl: "comneoreferences" EXPLOIT :...

Joomla Component NeoReferences 1.3.1 (catid) SQL Injection Vuln

Exploit for unknown platform in category web applications =============================================================== Joomla Component NeoReferences 1.3.1 catid SQL Injection Vuln =============================================================== joomla SQL Injectioncomneoreferences DorKs 1 :...

CVE-2008-0514

SQL injection vulnerability in index.php in the Glossary comglossary 2.0 component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a display action...

Mambo Component com_glossary 2.0 - catid SQL Injection

Mambo Component comglossary 2.0 - catid SQL Injection joomlaGlossary V2.0 SQL Injectioncomglossary AUTHOR : S@BUN HOME : http://www.hackturkiye.com/ DorKs 1 : allinurl: "comglossary" dork 2 : Glossary V2.0 exploit working html sites EXPLOIT :...

Sql injection

SQL injection vulnerability in index.php in Tiger Php News System TPNS 1.0b and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter in a newscat action...

CVE-2008-0429

SQL injection vulnerability in index.php in AlstraSoft Forum Pay Per Post Exchange 2.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter in a forumcatview action...

Sql injection

Multiple SQL injection vulnerabilities in Wallpaper Site 1.0.09 allow remote attackers to execute arbitrary SQL commands via 1 the catid parameter to category.php or 2 the groupid parameter to editadgroup.php...

CVE-2007-6362

SQL injection vulnerability in index.php in the RSGallery comrsgallery 2.0 beta 5 and earlier component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in an inline page action...

CVE-2002-2321

Cross-site scripting XSS vulnerability in 1 showcat.php and 2 addyoursite.php in phpLinkat 0.1.0 allows remote attackers to inject arbitrary web script or HTML via the catid parameter...

CVE-2007-5425

SQL injection vulnerability in admin/index.php in Interspire ActiveKB 1.5 allows remote attackers to execute arbitrary SQL commands via the questId parameter in a hideQuestion ToDo action. NOTE: the catId vector is already covered by CVE-2007-5131...

Sql injection

Multiple SQL injection vulnerabilities in MultiCart 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 catid parameter to categorydetail.php and the 2 ddlCategory parameter to search.php...