Sql injection

Multiple SQL injection vulnerabilities in xlinkerz ecommerceMajor allow remote attackers to execute arbitrary SQL commands via the 1 productbycat parameter to product.php, or 2 username or 3 password parameter to admin/index.php...

CVE-2015-1476: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in xlinkerz ecommerceMajor allow remote attackers to execute arbitrary SQL commands via the 1 productbycat parameter to product.php, or 2 username or 3 password parameter to admin/index.php...

PT-2015-5312

Name of the Vulnerable Software and Affected Versions xlinkerz ecommerceMajor affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the productbycat parameter to "product.php", or the username or password paramete...