Kamtiez

The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `storeid` parameter to the "index.php" endpoint.

The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the `face id` parameter in a `show face` action to the "index.php" endpoint.

The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the `course id` parameter in a detail action to "index.php".

A directory traversal issue exists, allowing remote attackers to read arbitrary files. This is achieved by using a .. (dot dot) in the `view` parameter to the "index.php" endpoint.

The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the `author` parameter in a search action to the "index.php" endpoint.

The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `mday` parameter in the "index.php" file.

The issue allows remote attackers to read arbitrary files via a .. (dot dot) in the `id` parameter in the misc/tell a friend/tell.php file.

The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the `category id` parameter in a 'view category' action to 'index.php'.

The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `get` parameter in the index.php file.

The issue allows remote attackers to execute arbitrary PHP code when register globals is enabled. This is achieved by providing a URL in the `includes directory` parameter.

The issue allows remote attackers to execute arbitrary SQL commands via the `id` parameter in a "category" action to "index.php". This can lead to unauthorized access and manipulation of database content.

The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via two parameters: the `md` parameter in an employer view company action to "index.php" or the `oi` parameter in an employer view job action to "index.php".

The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `id` parameter in the news detail.php file.

The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the `v` parameter in a "video action" within the index.php file.

The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the `stype` parameter in an `editsurvey` action to `index.php`.

The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `bid` parameter in a 'mybudget' action to "index.php".