CVE-2009-0428

SQL injection vulnerability in CategoryManager/uploadimagecategory.asp in DMXReady Secure Document Library 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2009-0401

SQL injection vulnerability in browsecats.php in E-Php CMS allows remote attackers to execute arbitrary SQL commands via the cid parameter...

Sql injection

SQL injection vulnerability in browsecats.php in E-Php CMS allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2009-0401

SQL injection vulnerability in browsecats.php in E-Php CMS allows remote attackers to execute arbitrary SQL commands via the cid parameter...

Sql injection

SQL injection vulnerability in questions.php in EsFaq 2.0 allows remote attackers to execute arbitrary SQL commands via the cid parameter, a different vector than CVE-2008-3952. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-6016

Affected product/version: EsFaq 2.0. Vulnerability: SQL injection in questions.php (two related vectors observed: via cid parameter for CVE-2008-6016 and via idcat parameter for CVE-2008-3952). Root cause (per sources): Unparameterized SQL handling in the backend allows remote attackers to inject...

CVE-2008-5960

SQL injection vulnerability in index.php in Tribiq CMS Community 5.0.10B and 5.0.11E allows remote attackers to execute arbitrary SQL commands via the cID parameter in a document action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

Sql injection

SQL injection vulnerability in index.php in Tribiq CMS Community 5.0.10B and 5.0.11E allows remote attackers to execute arbitrary SQL commands via the cID parameter in a document action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in Tribiq CMS Community 5.0.10B and 5.0.11E allows remote attackers to inject arbitrary web script or HTML via the cID parameter in a document action. NOTE: the provenance of this information is unknown; the details are obtained solely from thir...

CVE-2008-5961

CVE-2008-5961 is a cross-site scripting (XSS) vulnerability in Tribiq CMS Community versions 5.0.10B and 5.0.11E, exploitable via the cID parameter in a document action on index.php. The issue arises from inadequate input handling that allows an attacker to inject arbitrary script/HTML. Reported ...

Sql injection

SQL injection vulnerability in index.php in CadeNix allows remote attackers to execute arbitrary SQL commands via the cid parameter...

Sql injection

SQL injection vulnerability in cate.php in Lito Lite CMS, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2008-5636

CVE-2008-5636: SQL injection in Lito Lite CMS (cate.php) when magic_quotes_gpc is disabled. The vulnerability allows remote attackers to inject arbitrary SQL via the cid parameter due to insufficient input sanitization in that parameter. Exploitation details are not provided in the connected docu...

Sql injection

SQL injection vulnerability in sendcard.cfm in PostEcards allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2008-5559

CVE-2008-5559 describes a SQL injection vulnerability in the sendcard.cfm component of PostEcards. An attacker can exploit the cid parameter to execute arbitrary SQL commands on the backend database. The NVD entry (CVSSv2 base score 7.5, HIGH) indicates network access with low attack complexity a...

CVE-2008-5496

SQL injection vulnerability in showcategory.php in PozScripts Business Directory Script allows remote attackers to execute arbitrary SQL commands via the cid parameter...

Sql injection

SQL injection vulnerability in showcategory.php in PozScripts Business Directory Script allows remote attackers to execute arbitrary SQL commands via the cid parameter...

Sql injection

SQL injection vulnerability in view.php in ElkaGroup Image Gallery 1.0 allows remote attackers to execute arbitrary SQL commands via the cid parameter...

Sql injection

SQL injection vulnerability in category.php in Mosaic Commerce allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2008-4599

SQL injection vulnerability in category.php in Mosaic Commerce allows remote attackers to execute arbitrary SQL commands via the cid parameter...