Notice Board System category.php file SQL injection vulnerability

Notice Board System is a bulletin board system. A SQL injection vulnerability exists in the Notice Board System, which originates from the lack of validation of externally entered SQL statements in the /category.php file with the parameter catname. An attacker can exploit this vulnerability to...

CVE-2025-4060

A vulnerability, which was classified as critical, has been found in PHPGurukul Notice Board System 1.0. This issue affects some unknown processing of the file /category.php. The manipulation of the argument catname leads to sql injection. The attack may be initiated remotely. The exploit has bee...

PHPGurukul Notice Board System 注入漏洞

Notice Board System is a bulletin board system. A SQL injection vulnerability exists in the Notice Board System, which originates from the lack of validation of externally entered SQL statements in the /category.php file with the parameter catname. An attacker can exploit this vulnerability to...

Malicious code in sap-catname (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1ded0f51bfdbaec8f29cf41f4ba1847941f283704baf2a08b3d92aceadf005d1 The OpenSSF Package Analysis project identified 'sap-catname' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

YouPHPTube catName parameter SQL injection vulnerability

YouPHPTube is a PHP-based video website system. youPHPTube is vulnerable to SQL injection in version 10.0 and earlier, which stems from the lack of validation of external input SQL statements for the catName parameter. An attacker could use this vulnerability to execute illegal SQL commands to...

CVE-2021-25874

AVideo/YouPHPTube AVideo/YouPHPTube 10.0 and prior is affected by a SQL Injection SQL injection in the catName parameter which allows a remote unauthenticated attacker to retrieve databases information such as application passwords hashes...

CVE-2021-25874

AVideo/YouPHPTube AVideo/YouPHPTube 10.0 and prior is affected by a SQL Injection SQL injection in the catName parameter which allows a remote unauthenticated attacker to retrieve databases information such as application passwords hashes...

CVE-2021-25874

AVideo/YouPHPTube AVideo/YouPHPTube 10.0 and prior is affected by a SQL Injection SQL injection in the catName parameter which allows a remote unauthenticated attacker to retrieve databases information such as application passwords hashes...

YouPHPTube SQL注入漏洞

YouPHPTube is a PHP-based video website system. youPHPTube is vulnerable to SQL injection in version 10.0 and earlier, which stems from the lack of validation of external input SQL statements for the catName parameter. An attacker could use this vulnerability to execute illegal SQL commands to...

PT-2021-16822 · Unknown · Avideo/Youphptube

Name of the Vulnerable Software and Affected Versions: AVideo/YouPHPTube versions 10.0 and prior Description: The issue allows a remote unauthenticated attacker to retrieve database information, such as application password hashes, through a SQL injection in the catName parameter. Recommendations...

CVE-2019-9660

Stored XSS exists in YzmCMS 5.2 via the admin/category/edit.html "catname" parameter...

Cross site scripting

Stored XSS exists in YzmCMS 5.2 via the admin/category/edit.html "catname" parameter...

CVE-2019-9660

Stored XSS exists in YzmCMS 5.2 via the admin/category/edit.html "catname" parameter...

Design/Logic Flaw

An issue was discovered in DESTOON B2B 7.0. admin/category.inc.php has XSS via the categorycatname parameter to the admin.php URI...

CVE-2018-5982

SQL Injection exists in the Advertisement Board 3.1.0 component for Joomla! via a task=showrsscategories&catname= request...

Cross site scripting

Cross-site scripting XSS vulnerability in admin/category.php in Zomplog 3.8.2 allows remote attackers to inject arbitrary web script or HTML via the catname parameter...

CVE-2008-2176

Cross-site scripting XSS vulnerability in admin/category.php in Zomplog 3.8.2 allows remote attackers to inject arbitrary web script or HTML via the catname parameter...

CVE-2007-4167

PHP remote file inclusion vulnerability in catviewed.php in AL-Caricatier 2.5 allows remote attackers to execute arbitrary PHP code via a URL in the CatName parameter...

CVE-2007-4167

The CVE-2007-4167 entry describes a PHP remote file inclusion vulnerability in AL-Caricatier 2.5, where an attacker can cause arbitrary PHP code execution by supplying a URL in the CatName parameter of cat_viewed.php. The issue is rooted in including remote content via a user-controlled parameter...

CVE-2006-6936

Cross-site scripting XSS vulnerability in Xtreme ASP Photo Gallery allows remote attackers to inject arbitrary HTML or web script via 1 the catname parameter to displaypic.asp or 2 the search field. NOTE: vector 1 likely overlaps CVE-2006-3032...