Xcorpitx

**Name of the Vulnerable Software and Affected Versions** ASPapp (affected versions not specified) **Description** The issue allows remote attackers to execute arbitrary SQL commands via the `CatId` parameter in the "links.asp" file. This enables attackers to manipulate the database by injecting malicious SQL code. **Recommendations** For ASPapp, consider restricting access to the `CatId` parameter in the "links.asp" file until a patch is available. As a temporary workaround, avoid using the `CatId` parameter in the affected links.asp file to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** BM Classifieds versions 20080309 and earlier **Description** The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the `cat` parameter to "showad.php" and the `ad` parameter to "pfriendly.php". **Recommendations** For BM Classifieds versions 20080309 and earlier, consider restricting access to the `showad.php` and `pfriendly.php` scripts until a fix is available. As a temporary workaround, avoid using the `cat` and `ad` parameters in the affected API endpoints.

**Name of the Vulnerable Software and Affected Versions** PORAR WEBBOARD (affected versions not specified) **Description** The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `QID` parameter in the "question.asp" file. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** PHP-Nuke Kose Yazilari module (affected versions not specified) **Description** The issue concerns SQL injection vulnerabilities in the Kose Yazilari module for PHP-Nuke. Remote attackers can execute arbitrary SQL commands by manipulating the `artid` parameter in specific actions to the "modules.php" endpoint, such as viewarticle or printpage actions. **Recommendations** For the Kose Yazilari module, avoid using the `artid` parameter in the affected API endpoint until the issue is resolved. Restrict access to the vulnerable module to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Joomla! Noticias (com noticias) component version 1.0 **Description** The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the `id` parameter in a "detalhe" action within the index.php file of the Noticias component. **Recommendations** For version 1.0 of the Noticias (com noticias) component, avoid using the `id` parameter in the affected API endpoint until the issue is resolved. As a temporary workaround, consider restricting access to the index.php file in the Noticias component to minimize the risk of exploitation.