Sql injection

SQL injection vulnerability in viewcat.php in the Tutoriais module for Xoops allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2007-1816

CVE-2007-1816 describes an SQL injection in the XOOPS module Tutoriais , specifically in viewcat.php . The vulnerability is triggered through the cid parameter, enabling remote attackers to execute arbitrary SQL commands. Root cause: insufficient input validation/sanitization of the cid parameter...