vbLOGIX Tutorial Script < 1.0 - SQL Injection via cat_id Parameter
SQL injection vulnerability in main.php in vbLOGIX Tutorial Script 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in a list action.