CVE-2025-9928

A security flaw has been discovered in projectworlds Travel Management System 1.0. The impacted element is an unknown function of the file /viewcategory.php. Performing manipulation of the argument t1 results in sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2025-9928 projectworlds Travel Management System viewcategory.php sql injection

A security flaw has been discovered in projectworlds Travel Management System 1.0. The impacted element is an unknown function of the file /viewcategory.php. Performing manipulation of the argument t1 results in sql injection. It is possible to initiate the attack remotely. The exploit has been...

Projectworlds Travel management System SQL注入漏洞

Projectworlds Travel management System is a travel management system from Projectworlds India. A SQL injection vulnerability exists in Projectworlds Travel management System version 1.0, which originates from an incorrect manipulation of parameter t1 in file /viewcategory.php resulting in a SQL...

PT-2025-35836

Name of the Vulnerable Software and Affected Versions: projectworlds Travel Management System version 1.0 Description: A security flaw exists in projectworlds Travel Management System. The issue involves SQL injection in the /viewcategory.php file through manipulation of the t1 argument. This...

CMS Wizard SQL Injection

Title : CMS Wizard SQL Injection Vulnerbility Date : 7th June 2012 Author : Mr.Gh0st [email protected] Vendor : http://www.cmswizard.co.uk/ Dork : intext:Powered by CMS Wizard inurl:shop.php?viewcategory= Tested On :Arch Linux P0c : /shop.php?viewcategory=104' Demo Site :...

JE CMS version 1.1 SQL Injection Vulnerability

No description provided by source. ========================================================================================================================================================== o JE CMS SQL Injection Vulnerability Software : JE CMS version 1.1 Vendor : http://joenasejes.cz.cc/ Author...

Joomla! Component com_portfol - SQL Injection

Joomla! Component comportfol - SQL Injection || || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ team wlhaan hacker | | // | | |...

Sql injection

SQL injection vulnerability in the GridSupport GS Ticket System comgsticketsystem component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a viewCategory action to index.php...

Sql injection

SQL injection vulnerability in index.cfm in CF Shopkart 5.2.2 allows remote attackers to execute arbitrary SQL commands via the Category parameter in a ViewCategory action...

Sql injection

SQL injection vulnerability in the Portfol comportfol 1.2 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the vcatid parameter in a viewcategory action to index.php...

Joomla! Component EZ Store Remote - Blind SQL Injection

!/usr/bin/perl Note:Sometimes you have to change the regexp to viewcategory/catid,".$cid." use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print " \n"; print " \n"; print " Joomla Component EZ Store Blind SQL Injection Exploit \n"; print " Author:His0k4 ALGERIAN HaCkeR \n"; print " \n"; print "...

joomlamygallery-sql.txt

H-T Team HouSSamix & ToXiC350 ===================================================================== Joomla Component mygallery Remote SQL Injection Exploit ===================================================================== AUTHOR : HouSSamix From H-T TeaM Script : mygallery Joomla Component...

Joomla! Component mygallery - cid SQL Injection

Joomla! Component mygallery - cid SQL Injection H-T Team HouSSamix & ToXiC350 ===================================================================== Joomla Component mygallery Remote SQL Injection Exploit ===================================================================== AUTHOR : HouSSamix From...

Cross site scripting

Cross-site scripting XSS vulnerability in catalog.php in Smartscript Domain Trader 2.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter in a viewcategory action...

CVE-2008-0688

CVE-2008-0688 describes a cross-site scripting (XSS) vulnerability in the Smartscript Domain Trader 2.0 product, specifically in catalog.php. The flaw allows remote attackers to inject arbitrary web script or HTML via the id parameter in a viewcategory action. The connected records confirm the af...