126 matches found
CVE-2008-2568
CVE-2008-2568 is a SQL injection vulnerability in Joomla!’s Simple Shop Galore (com_simpleshop) component, affecting version 3.4 and earlier. The flaw allows remote attackers to inject and execute arbitrary SQL commands via the catid parameter in a browse action to index.php. Public references in...
CVE-2008-2568
creationtimestamp| type| source ---|---|--- 2008-06-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5743 2008-06-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5833...
CVE-2007-2568
VCDGear 3.55 contains multiple stack-based buffer overflows in the CUE file parser, exploitable via a long (1) tag or (2) track type in a CUE file. This enables user‑assisted remote code execution. The provided documents do not include a remediation or patched version.
CVE-2006-2568
PHP remote file inclusion vulnerability in addpostnewpoll.php in UBB.threads 6.4 through 6.5.2 and 6.5.1.1 trial allows remote attackers to execute arbitrary PHP code via a URL in the thispath parameter...
CVE-2004-2568
CVE-2004-2568 concerns multiple cross-site scripting (XSS) flaws in ReciPants 1.1.1. The issue arises from insufficient input sanitization in fields such as user id, recipe id, category id and other ID numbers, enabling remote script/HTML injection. The connected Red Hat and CVE records confirm t...
CVE-2005-2568
CVE-2005-2568 describes an eval-injection vulnerability in SysCP's template engine affecting SysCP 1.2.10 and earlier. An attacker can supply a string containing code inside { and } that is processed by PHP eval, enabling remote execution of arbitrary PHP. The NVD CVSS data rates impact as PARTIA...