CVE-2006-2884: Undefined Security Weakness

SQL injection vulnerability in index.php in Kmita FAQ 1.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

ProPublish 2.0 (catid) Remote SQL Injection Vulnerability

No description provided by source. ProPublish 2.0 catid Remote SQL Injection Vulnerability Thanks to soot : http://www.securityfocus.com/archive/1/435787/30/0/threaded Exploited by FarhadKey from kapda.ir Exploit :...

CVE-2006-2696

Cross-site scripting XSS vulnerabilities in Easy-Content Forums 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 startletter parameter in userview.asp and the 2 catid parameter in topics.asp...

CVE-2006-2696: Undefined Security Weakness

Cross-site scripting XSS vulnerabilities in Easy-Content Forums 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 startletter parameter in userview.asp and the 2 catid parameter in topics.asp...

Sql injection

SQL injection vulnerability in the weblinks option weblinks.html.php in Limbo CMS allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2006-2363

SQL injection vulnerability in the weblinks option weblinks.html.php in Limbo CMS allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2006-2363

SQL injection vulnerability in the weblinks option weblinks.html.php in Limbo CMS allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2006-2363

CVE-2006-2363 affects Limbo CMS via the weblinks option (weblinks.html.php). The vulnerability is a SQL injection in the catid parameter that can allow an unauthenticated attacker to influence database queries, potentially exposing password hashes when Limbo uses MySQL. Exploitation details and i...

Limbo weblinks.html.php catid Parameter SQL Injection

The remote host is running Limbo CMS, a content-management system written in PHP. The version of Limbo CMS installed on the remote host fails to sanitize input to the 'catid' parameter of the 'index.php' script before using it in a database query. An unauthenticated attacker may be able to levera...

CVE-2006-2363: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the weblinks option weblinks.html.php in Limbo CMS allows remote attackers to execute arbitrary SQL commands via the catid parameter...

Sql injection

Multiple SQL injection vulnerabilities in EImagePro allow remote attackers to execute arbitrary SQL commands via the 1 CatID parameter to subList.asp, 2 SubjectID parameter to imageList.asp, or 3 Pic parameter to view.asp...

CVE-2006-2300

Multiple SQL injection vulnerabilities in EImagePro allow remote attackers to execute arbitrary SQL commands via the 1 CatID parameter to subList.asp, 2 SubjectID parameter to imageList.asp, or 3 Pic parameter to view.asp...

CVE-2006-2300: Undefined Security Weakness

Multiple SQL injection vulnerabilities in EImagePro allow remote attackers to execute arbitrary SQL commands via the 1 CatID parameter to subList.asp, 2 SubjectID parameter to imageList.asp, or 3 Pic parameter to view.asp...

Sql injection

SQL injection vulnerability in plexcart.pl in NicPlex PlexCart X3 and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2006-1949

CVE-2006-1949 affects NicPlex PlexCart X3 and earlier. A SQL injection vulnerability exists in plexcart.pl, exploitable via the catid parameter, allowing remote attackers to execute arbitrary SQL commands. The NVD entry records impact as partial confidentiality/integrity/availability with network...

CVE-2006-1949: Undefined Security Weakness

SQL injection vulnerability in plexcart.pl in NicPlex PlexCart X3 and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in viewcaricatier.php in AL-Caricatier 2.5 allow remote attackers to inject arbitrary web script or HTML via the 1 CatName, 2 CaricatierID, or 3 CatID parameter...

CVE-2006-1556

Multiple cross-site scripting XSS vulnerabilities in viewcaricatier.php in AL-Caricatier 2.5 allow remote attackers to inject arbitrary web script or HTML via the 1 CatName, 2 CaricatierID, or 3 CatID parameter...

CVE-2006-1556: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in viewcaricatier.php in AL-Caricatier 2.5 allow remote attackers to inject arbitrary web script or HTML via the 1 CatName, 2 CaricatierID, or 3 CatID parameter...

Sql injection

SQL injection vulnerability in D3Jeeb Pro 3 allows remote attackers to execute arbitrary SQL commands via the catid parameter in 1 fastlinks.php and 2 catogary.php...