CVE-2006-6080

Multiple SQL injection vulnerabilities in categories.asp in gNews Publisher allow remote attackers to execute arbitrary SQL commands via the 1 catID or 2 editorID parameter...

CVE-2006-6080

Multiple SQL injection vulnerabilities in categories.asp in gNews Publisher allow remote attackers to execute arbitrary SQL commands via the 1 catID or 2 editorID parameter...

PT-2006-6622 · Infinicart · Infinicart

Name of the Vulnerable Software and Affected Versions: INFINICART affected versions not specified Description: The issue concerns SQL injection vulnerabilities that could allow remote attackers to execute arbitrary SQL commands. This is possible via several parameters in different ASP files,...

CVE-2006-5880

SQL injection vulnerability on the subMenu page in switch.asp in Munch Pro 1.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2006-4967

Multiple cross-site scripting XSS vulnerabilities in NextAge Cart allow remote attackers to inject arbitrary web script or HTML via 1 the CatId parameter in a product category action in index.php or 2 the SearchWd parameter in an index search action in index.php...

CVE-2006-4967

Multiple cross-site scripting XSS vulnerabilities in NextAge Cart allow remote attackers to inject arbitrary web script or HTML via 1 the CatId parameter in a product category action in index.php or 2 the SearchWd parameter in an index search action in index.php...

SQL injection Seir Anphin v666 Community Management System

CR Advisory1 programm: Seir Anphin v666 Community Management System bug: SQL injection home page: www.comeplaydying.com bug found: 27.07.2006 discovered by CR www.svt.nukleon.us ! Details ! ============================================================================================ index.php...

CVE-2006-3349

Multiple SQL injection vulnerabilities in SmS Script allow remote attackers to execute arbitrary SQL commands via the CatID parameter in 1 cat.php and 2 add.php...

CVE-2006-3349

CVE-2006-3349: The connected sources confirm multiple SQL injection vulnerabilities in SmS Script, exploitable remotely via the CatID parameter in cat.php and add.php. The NVD entry documents the impact as arbitrary SQL execution with partial confidentiality/integrity/availability effects (CVSS v...

Sql injection

SQL injection vulnerability in index.php in Kmita FAQ 1.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2006-2884

SQL injection vulnerability in index.php in Kmita FAQ 1.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

ProPublish 2.0 (catid) Remote SQL Injection Vulnerability

No description provided by source. ProPublish 2.0 catid Remote SQL Injection Vulnerability Thanks to soot : http://www.securityfocus.com/archive/1/435787/30/0/threaded Exploited by FarhadKey from kapda.ir Exploit :...

CVE-2006-2696

Cross-site scripting XSS vulnerabilities in Easy-Content Forums 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 startletter parameter in userview.asp and the 2 catid parameter in topics.asp...

Sql injection

SQL injection vulnerability in the weblinks option weblinks.html.php in Limbo CMS allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2006-2363

SQL injection vulnerability in the weblinks option weblinks.html.php in Limbo CMS allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2006-2363

SQL injection vulnerability in the weblinks option weblinks.html.php in Limbo CMS allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2006-2363

CVE-2006-2363 affects Limbo CMS via the weblinks option (weblinks.html.php). The vulnerability is a SQL injection in the catid parameter that can allow an unauthenticated attacker to influence database queries, potentially exposing password hashes when Limbo uses MySQL. Exploitation details and i...

Limbo weblinks.html.php catid Parameter SQL Injection

The remote host is running Limbo CMS, a content-management system written in PHP. The version of Limbo CMS installed on the remote host fails to sanitize input to the 'catid' parameter of the 'index.php' script before using it in a database query. An unauthenticated attacker may be able to levera...

CVE-2006-2300

Multiple SQL injection vulnerabilities in EImagePro allow remote attackers to execute arbitrary SQL commands via the 1 CatID parameter to subList.asp, 2 SubjectID parameter to imageList.asp, or 3 Pic parameter to view.asp...

Sql injection

Multiple SQL injection vulnerabilities in EImagePro allow remote attackers to execute arbitrary SQL commands via the 1 CatID parameter to subList.asp, 2 SubjectID parameter to imageList.asp, or 3 Pic parameter to view.asp...