Kaan Kamis

A critical issue has been identified, affecting the /mcategory.php file. The `mcid` argument is vulnerable to manipulation, allowing for SQL injection (Blind) attacks when input such as `4' AND 1734=1734 AND 'Ggks'='Ggks` is used. This issue can be exploited remotely.

A critical issue affects an unknown functionality of the file /real-estate-script/search property.php. The manipulation of the `property for` argument leads to SQL injection. The attack can be launched remotely.

A critical issue has been identified, affecting an unknown function of the file /news-portal-script/information.php. The manipulation of the `inf` argument leads to SQL injection, allowing for remote attacks. The exploit has been publicly disclosed and may be used.

A critical issue affects the processing of the file /multi-vendor-shopping-script/product-list.php, where the manipulation of the `pl` argument leads to SQL injection. The attack can be initiated remotely.

A critical issue was found in the software, affecting an unknown part of the file /admin, leading to improper authentication. The manipulation can be initiated remotely.

A critical issue has been found in the software, affecting some unknown functionality of the file /category.php. The manipulation of the `sk` argument leads to SQL injection. The attack can be launched remotely.

A critical issue was found in the file /see more details.php, where the manipulation of the `id` argument leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

A critical issue has been discovered, allowing for SQL injection through the manipulation of the `scat` argument in the `/subpage.php` file with a specific input. This can be exploited remotely. The issue has been publicly disclosed and may be used for attacks.

A critical issue affects the processing of the file /catcompany.php. The manipulation of the `token` argument with a specific input leads to SQL injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

A critical issue has been identified, allowing for SQL injection through the manipulation of the `query` argument in the /LogoStore/search.php file. This can be achieved by providing a specific input, such as ' UNION ALL SELECT CONCAT(CONCAT('qqkkq','VnPVWVaYxljWqGpLLbEIyPIHBjjjjASQTnaqfKaV'),'qvvpq'),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL-- oCrh&search=. The attack can be launched remotely.