Road_Killer

The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the `Itemid` parameter in the "index.php" endpoint.

The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the `id` parameter in a `showExpertProfileDetailed` action to `index.php`.

The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `products id` parameter in the product info.php file.

A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via the `keywords` parameter in the "advanced search result.php" file.

The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the `id` parameter in a view action to the "index.php" endpoint.

The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `ecPath` parameter in the "index.php" file.

The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the `Itemid` parameter in a category action to the "index.php" endpoint.