ZeusCart <= 2.0 (category_list.php) SQL Injection Vulnerability

漏洞描述：Square ZeusCart是一款的为在线电子商务网站提供的购物车脚本程序。 AJ Square ZeusCart 2.0 及其早期版本的categorylist.php中存在SQL注入漏洞。远程攻击者可以借助cid参数，执行任意SQL指令。漏洞分析：categorylist.php文件中对cid变量没有进行有效过滤，允许远程攻击者直接对数据库进行操作，读取数据库中信息。...

Sql injection

Multiple SQL injection vulnerabilities in Acidcat CMS 3.4.1 allow remote attackers to execute arbitrary SQL commands via the 1 cID parameter to default.asp and the 2 username parameter to mainlogin2.asp...

CVE-2008-1990: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Acidcat CMS 3.4.1 allow remote attackers to execute arbitrary SQL commands via the 1 cID parameter to default.asp and the 2 username parameter to mainlogin2.asp...

Sql injection

SQL injection vulnerability in adminviewimage.php in Smoothflash allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2008-1623

SQL injection vulnerability in adminviewimage.php in Smoothflash allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2008-1623: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in adminviewimage.php in Smoothflash allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2008-1551

SQL injection vulnerability in viewcat.php in the Photo 3.02 module for RunCMS allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2008-1551: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in viewcat.php in the Photo 3.02 module for RunCMS allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2008-1349: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in viewcat.php in the bamaGalerie Bama Galerie 3.03 and 3.041 module for eXV2 2.0.6 allows remote attackers to execute arbitrary SQL commands via the cid parameter...

Joomla Component Candle 1.0 (cID) SQL Injection Vulnerability

No description provided by source. JOOMLA comcandle SQL Injectioncid AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAiL : [email protected] DORK 1 : allinurl:"comcandle" EXPLOIT :...

Sql injection

SQL injection vulnerability in index.php in the Prayer List prayerlist 1.04 module for XOOPS allows remote attackers to execute arbitrary SQL commands via the cid parameter in a view action...

CVE-2008-0936: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in the Prayer List prayerlist 1.04 module for XOOPS allows remote attackers to execute arbitrary SQL commands via the cid parameter in a view action...

Sql injection

SQL injection vulnerability in the Manuales 0.1 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the cid parameter in a viewdownload action to modules.php...

CVE-2008-0922

SQL injection vulnerability in the Manuales 0.1 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the cid parameter in a viewdownload action to modules.php...

Sql injection

SQL injection vulnerability in the Inhalt module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2008-0907

SQL injection vulnerability in the Inhalt module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2008-0907: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Inhalt module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2008-0922: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Manuales 0.1 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the cid parameter in a viewdownload action to modules.php...

Sql injection

SQL injection vulnerability in index.php in the jlmZone Classifieds module for XOOPS allows remote attackers to execute arbitrary SQL commands via the cid parameter in an Adsview action...

Sql injection

SQL injection vulnerability in modules.php in the WebLinks module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the cid parameter in a viewlink action...