CVE-2005-3843

CVE-2005-3843 describes an SQL injection in Nicecoder iDesk 1.0, specifically in faq.php via the cat_id parameter, allowing remote attackers to execute arbitrary SQL commands. The connected documents confirm the vulnerable component (faq.php, cat_id) and the impact (arbitrary SQL execution); no e...

CVE-2009-4624

CVE-2009-4624 affects Nicecoder iDesk via a SQL injection in download.php that is exploitable through the cat_id parameter. The vulnerability is in the application layer where user-supplied cat_id can cause arbitrary SQL execution, with impact described as arbitrary SQL commands being run by an a...