541 matches found
Sql injection
SQL injection vulnerability in index.php in Tiger Php News System TPNS 1.0b and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter in a newscat action...
CVE-2008-0469: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in Tiger Php News System TPNS 1.0b and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter in a newscat action...
CVE-2008-0429
SQL injection vulnerability in index.php in AlstraSoft Forum Pay Per Post Exchange 2.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter in a forumcatview action...
CVE-2008-0429: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in AlstraSoft Forum Pay Per Post Exchange 2.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter in a forumcatview action...
Sql injection
Multiple SQL injection vulnerabilities in Wallpaper Site 1.0.09 allow remote attackers to execute arbitrary SQL commands via 1 the catid parameter to category.php or 2 the groupid parameter to editadgroup.php...
CVE-2007-6580: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in Wallpaper Site 1.0.09 allow remote attackers to execute arbitrary SQL commands via 1 the catid parameter to category.php or 2 the groupid parameter to editadgroup.php...
CVE-2007-6362
SQL injection vulnerability in index.php in the RSGallery comrsgallery 2.0 beta 5 and earlier component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in an inline page action...
CVE-2007-6362: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in the RSGallery comrsgallery 2.0 beta 5 and earlier component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in an inline page action...
CVE-2002-2321
Cross-site scripting XSS vulnerability in 1 showcat.php and 2 addyoursite.php in phpLinkat 0.1.0 allows remote attackers to inject arbitrary web script or HTML via the catid parameter...
CVE-2002-2321: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in 1 showcat.php and 2 addyoursite.php in phpLinkat 0.1.0 allows remote attackers to inject arbitrary web script or HTML via the catid parameter...
CVE-2007-5425
SQL injection vulnerability in admin/index.php in Interspire ActiveKB 1.5 allows remote attackers to execute arbitrary SQL commands via the questId parameter in a hideQuestion ToDo action. NOTE: the catId vector is already covered by CVE-2007-5131...
Sql injection
Multiple SQL injection vulnerabilities in MultiCart 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 catid parameter to categorydetail.php and the 2 ddlCategory parameter to search.php...
CVE-2007-5261: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in MultiCart 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 catid parameter to categorydetail.php and the 2 ddlCategory parameter to search.php...
CVE-2007-5131
SQL injection vulnerability in index.php in Interspire ActiveKB NX 2.x allows remote attackers to execute arbitrary SQL commands via the catId parameter in a browse action. NOTE: it was separately reported that ActiveKB 1.5 is also affected...
CVE-2007-5131: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in Interspire ActiveKB NX 2.x allows remote attackers to execute arbitrary SQL commands via the catId parameter in a browse action. NOTE: it was separately reported that ActiveKB 1.5 is also affected...
ActiveKB KnowledgeBase 2.x - 'catId' SQL Injection
ActiveKB NX 2.? Powered by ActiveKB Knowledgebase Software index.php SQL Injection Discovered by Luna-Tic and XTErner 19 Years Ukrainian Hackers Vendor:www.interspire.com/activekb/ License:sharewere Exploit:/kb/index.php?ToDo=browse&catId=SQL CODE...
CVE-2007-4603: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in index.php in ACG News 1.0 allow remote attackers to execute arbitrary SQL commands via 1 the aid parameter in a showarticle action or 2 the catid parameter in a showcat action...
CVE-2007-4046
SQL injection vulnerability in index.php in the Pony Gallery componygallery 1.5 and earlier component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter...
CVE-2007-4046: Undefined Security Weakness
SQL injection vulnerability in index.php in the Pony Gallery componygallery 1.5 and earlier component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter...