CVE-2006-0906

SQL injection vulnerability in D3Jeeb Pro 3 allows remote attackers to execute arbitrary SQL commands via the catid parameter in 1 fastlinks.php and 2 catogary.php...

CVE-2006-0906

CVE-2006-0906 describes an SQL injection vulnerability in D3Jeeb Pro 3. The flaw allows remote attackers to execute arbitrary SQL commands through the catid parameter in the files fastlinks.php and catogary.php. This is documented across multiple sources (NVD and related records) and is classifie...

CVE-2006-0906: Undefined Security Weakness

SQL injection vulnerability in D3Jeeb Pro 3 allows remote attackers to execute arbitrary SQL commands via the catid parameter in 1 fastlinks.php and 2 catogary.php...

CVE-2005-4262

Cross-site scripting XSS vulnerability in the News module in Envolution allows remote attackers to inject arbitrary web script or HTML via the 1 startrow and 2 catid parameter. NOTE: this issue might be resultant from the SQL injection problem CVE-2005-4263...

CVE-2005-4262

Cross-site scripting XSS vulnerability in the News module in Envolution allows remote attackers to inject arbitrary web script or HTML via the 1 startrow and 2 catid parameter. NOTE: this issue might be resultant from the SQL injection problem CVE-2005-4263...

CVE-2005-4263: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the News module in Envolution allows remote attackers to execute arbitrary SQL commands via the 1 startrow and 2 catid parameter...

CVE-2005-4262: Undefined Security Weakness

Cross-site scripting XSS vulnerability in the News module in Envolution allows remote attackers to inject arbitrary web script or HTML via the 1 startrow and 2 catid parameter. NOTE: this issue might be resultant from the SQL injection problem CVE-2005-4263...

CVE-2005-3978

Multiple SQL injection vulnerabilities in NetClassifieds Premium Edition, Professional Edition, Standard Edition, and Free Edition allow remote attackers to execute arbitrary SQL via (1) CatID in ViewCat.php and gallery.php and (2) ItemNum in ViewItem.php. Affected versions: Premium 1.0.1, Profes...

CVE-2005-3696

SQL injection vulnerability in Arki-DB 1.0 and 2.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter in a view action view.php to index.php...

CVE-2005-3696: Undefined Security Weakness

SQL injection vulnerability in Arki-DB 1.0 and 2.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter in a view action view.php to index.php...

CVE-2002-1996: Undefined Security Weakness

Cross-site scripting XSS vulnerability in PostNuke 0.71 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 name parameter in modules.php and 2 catid parameter in index.php...

CVE-2005-2062

CVE-2005-2062 affects ActiveBuyAndSell 6.2. Multiple SQL injection vulnerabilities allow remote attackers to execute arbitrary SQL commands via the catid parameter to (1) default.asp or (2) buyersend.asp, (3) Administrator ID field in admin.asp, E-mail field in (4) advertiserstart.asp or (5) buye...

CVE-2005-2062: Undefined Security Weakness

Multiple SQL injection vulnerabilities in ActiveBuyAndSell 6.2 allow remote attackers to execute arbitrary SQL commands via the catid parameter to 1 default.asp or 2 buyersend.asp, 3 Administrator ID field in admin.asp, E-mail field in 4 advertiserstart.asp or 5 buyer.asp, or Keyword field in...

CVE-2004-1972: Undefined Security Weakness

SQL injection vulnerability in modules.php in PHP-Nuke Video Gallery Module 0.1 Beta 5 allows remote attackers to execute arbitrary SQL code via the 1 clipid or 2 catid parameters in a viewclip, viewcat, or voteclip action...

CVE-2005-1079

The CVE-2005-1079 entry describes a SQL injection in zOOm Media Gallery 2.1.2 through the catid parameter in index.php, allowing remote attackers to execute arbitrary SQL commands. Affected software: zOOm Media Gallery 2.1.2 (index.php vulnerability in catid). Root cause: unsafely concatenated us...

CVE-2005-1079

SQL injection vulnerability in index.php for zOOm Media Gallery 2.1.2 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2005-1079: Undefined Security Weakness

SQL injection vulnerability in index.php for zOOm Media Gallery 2.1.2 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2005-0615: Undefined Security Weakness

Multiple SQL injection vulnerabilities in 1 index.php, 2 modules.php, or 3 admin.php in PostNuke 0.760-RC2 allow remote attackers to execute arbitrary SQL code via the catid parameter...

PostNuke Phoenix 0.7x - 'CATID' SQL Injection

source: https://www.securityfocus.com/bid/12683/info PostNuke Phoenix is reported prone to an SQL injection vulnerability. This issue arises due to insufficient sanitization of user-supplied input. It is reported that issue presents itself when malicious SQL syntax is issued to the application...

CVE-2004-1668: Undefined Security Weakness

Multiple SQL injection vulnerabilities in index.php in Subjects 2.0 Postnuke module allow remote attackers to execute arbitrary SQL commands via the 1 pageid, 2 subid, or 3 catid parameters...