541 matches found
CVE-2006-7115: Undefined Security Weakness
SQL injection vulnerability in PHPKit 1.6.1 RC2 allows remote attackers to inject arbitrary SQL commands via the catid parameter to include.php when the path parameter is set to faq/faq.php, and other unspecified vectors involving guestbook/print.php...
CVE-2006-7058
Multiple cross-site scripting XSS vulnerabilities in Sphider before 1.3.1c allow remote attackers to inject arbitrary web script or HTML via the catid parameter to 1 templates/standard/searchform.html and 2 templates/dark/searchform.html. NOTE: the provenance of this information is unknown; the...
CVE-2006-7058: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in Sphider before 1.3.1c allow remote attackers to inject arbitrary web script or HTML via the catid parameter to 1 templates/standard/searchform.html and 2 templates/dark/searchform.html. NOTE: the provenance of this information is unknown; the...
CVE-2007-0631
SQL injection vulnerability in index.php in Eclectic Designs CascadianFAQ 4.1 and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter...
CVE-2007-0631: Undefined Security Weakness
SQL injection vulnerability in index.php in Eclectic Designs CascadianFAQ 4.1 and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter...
Sql injection
SQL injection vulnerability in models/category.php in the Weblinks component for Joomla! SVN 20070118 comweblinks allows remote attackers to execute arbitrary SQL commands via the catid parameter...
CVE-2007-0387
SQL injection vulnerability in models/category.php in the Weblinks component for Joomla! SVN 20070118 comweblinks allows remote attackers to execute arbitrary SQL commands via the catid parameter...
CVE-2007-0387: Undefined Security Weakness
SQL injection vulnerability in models/category.php in the Weblinks component for Joomla! SVN 20070118 comweblinks allows remote attackers to execute arbitrary SQL commands via the catid parameter...
Sql injection
SQL injection vulnerability in orange.asp in ShopStoreNow E-commerce Shopping Cart allows remote attackers to execute arbitrary SQL commands via the CatID parameter...
CVE-2007-0142
SQL injection vulnerability in orange.asp in ShopStoreNow E-commerce Shopping Cart allows remote attackers to execute arbitrary SQL commands via the CatID parameter...
CVE-2007-0112
SQL injection vulnerability in cats.asp in createauction allows remote attackers to execute arbitrary SQL commands via the catid parameter...
Sql injection
SQL injection vulnerability in cats.asp in createauction allows remote attackers to execute arbitrary SQL commands via the catid parameter...
CVE-2007-0112
CVE-2007-0112 : SQL injection vulnerability in cats.asp in createauction via the catid parameter that allows remote attackers to execute arbitrary SQL commands. Connected documents confirm the issue, but do not provide exploit, affected product/version details, or remediation steps. No exploitati...
CVE-2007-0142: Undefined Security Weakness
SQL injection vulnerability in orange.asp in ShopStoreNow E-commerce Shopping Cart allows remote attackers to execute arbitrary SQL commands via the CatID parameter...
CVE-2007-0112
SQL injection vulnerability in cats.asp in createauction allows remote attackers to execute arbitrary SQL commands via the catid parameter...
CVE-2007-0112: Undefined Security Weakness
SQL injection vulnerability in cats.asp in createauction allows remote attackers to execute arbitrary SQL commands via the catid parameter...
Link Exchange Lite SQL 注入漏洞
Link Exchange Lite是一款基于ASP的WEB应用程序。 Link Exchange Lite不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行sql注入攻击，获得敏感信息。 问题是由于'categories.asp'脚本对用户提交的WEB参数缺少过滤，提交恶意sql查询作为参数数据，可更改原来的sql逻辑，获得敏感信息。 Softacid Link Exchange Lite 1.0 http://softacid.net/ http://www.example.com/categories.asp?catID=SQL Injection...
CVE-2006-6094
CVE-2006-6094 refers to multiple SQL injection vulnerabilities in ActiveNews Manager, exposed via (1) catID in activeNews_categories.asp, (2) articleID in activeNews_comments.asp, and (3) query in activenews_search.asp. Connected records corroborate that these are remote SQL injection flaws allow...