[Full-disclosure] [DSF-02-2009] - Zoki Catalog SQL Injection

Ref. DSF-02-2009 - Zoki Catalog SQL Injection Vendor: Zoki Soft www.zokisoft.com Status: Patched by vendor Original advisory: http://www.davidsopas.com/2009/06/15/zoki-catalog-sql-injection/ Zoki Catalog Smart Catalog is unique and convenient software. It is designed for many purposes whether you...

CVE-2009-2097

SQL injection vulnerability in system/application/controllers/catalog.php in Zoki Soft Zoki Catalog aka Smart Catalog allows remote attackers to execute arbitrary SQL commands via the searchtext parameter. NOTE: some of these details are obtained from third party information...

[DSF-02-2009] - Zoki Catalog SQL Injection

Ref. DSF-02-2009 - Zoki Catalog SQL Injection Vendor: Zoki Soft www.zokisoft.com Status: Patched by vendor Original advisory: http://www.davidsopas.com/2009/06/15/zoki-catalog-sql-injection/ Zoki Catalog Smart Catalog is unique and convenient software. It is designed for many purposes whether you...