Lucene search
+L

50 matches found

NVD
NVD
added 2014/01/21 4:6 p.m.48 views

CVE-2013-7219

SQL injection vulnerability in vote.php in the 2Glux Sexy Polling comsexypolling component before 1.0.9 for Joomla! allows remote attackers to execute arbitrary SQL commands via the answerid parameter...

7.5CVSS8.3AI score0.02289EPSS
Exploits3References4
CVE
CVE
added 2014/01/21 4:0 p.m.80 views

CVE-2013-7219

CVE-2013-7219 affects the Joomla! Sexy Polling extension (com_sexypolling) by 2GLux. The vulnerability is an SQL injection in vote.php caused by insufficient validation of the POST parameter answer_id[]. This allows remote attackers to execute arbitrary SQL commands against the application's data...

7.5CVSS8.5AI score0.02289EPSS
Exploits3References4Affected Software1
Cvelist
Cvelist
added 2014/01/21 4:0 p.m.52 views

CVE-2013-7219

SQL injection vulnerability in vote.php in the 2Glux Sexy Polling comsexypolling component before 1.0.9 for Joomla! allows remote attackers to execute arbitrary SQL commands via the answerid parameter...

8.3AI score0.02289EPSS
Exploits3References4
securityvulns
securityvulns
added 2014/01/19 12:0 a.m.110 views

SQL Injection in Sexy Polling Joomla Extension

Advisory ID: HTB23193 Product: Sexy Polling Joomla Extension Vendor: 2GLux Vulnerable Versions: 1.0.8 and probably prior Tested Version: 1.0.8 Advisory Publication: December 26, 2013 without technical details Vendor Notification: December 26, 2013 Vendor Patch: January 8, 2014 Public Disclosure:...

7.5CVSS8.1AI score0.02289EPSS
Exploits3
Packet Storm
Packet Storm
added 2014/01/16 12:0 a.m.73 views

Joomla Sexy Polling 1.0.8 SQL Injection

Advisory ID: HTB23193 Product: Sexy Polling Joomla Extension Vendor: 2GLux Vulnerable Versions: 1.0.8 and probably prior Tested Version: 1.0.8 Advisory Publication: December 26, 2013 without technical details Vendor Notification: December 26, 2013 Vendor Patch: January 8, 2014 Public Disclosure:...

7.5CVSS0.5AI score0.02289EPSS
Exploits3
Circl
Circl
added 2014/01/16 12:0 a.m.33 views

CVE-2013-7219

creationtimestamp| type| source ---|---|--- 2014-01-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39028...

7.5CVSS6.8AI score0.02289EPSS
Exploits3References1
CVE
CVE
added 2009/09/13 10:0 p.m.65 views

CVE-2008-7219

CVE-2008-7219 affects Horde Kronolith H3 (2.1 up to before 2.1.7; 2.2 before 2.2-RC2), Nag H3 (2.1 before 2.1.4; 2.2 before 2.2-RC2), Mnemo H3 (2.1 before 2.1.2; 2.2 before 2.2-RC2), Groupware (1.0 before 1.0.3; 1.1 before 1.1-RC2) and Groupware Webmail Edition (1.0 before 1.0.4; 1.1 before 1.1-R...

10CVSS6.7AI score0.02744EPSS
Exploits0References13Affected Software5
OpenVAS
OpenVAS
added 2009/02/16 12:0 a.m.20 views

Fedora Update for kronolith FEDORA-2008-2212

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

10CVSS6.8AI score0.02744EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2008/03/07 12:0 a.m.22 views

Fedora 7 : kronolith-2.1.7-1.fc7 (2008-2212)

Fix privilege escalation in Horde API. Fix missing ownership validation on share changes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

10CVSS5.4AI score0.02744EPSS
Exploits0References3
CVE
CVE
added 2007/07/06 7:0 p.m.46 views

CVE-2006-7219

The CVE concerns eZ Publish before 3.8.5 where permissions for editing in a specific language are not properly enforced. This allows remote authenticated users to create a draft in an unauthorized language by editing an archived version of an object, then using Manage Versions to copy that versio...

4CVSS6.3AI score0.00982EPSS
Exploits0References3Affected Software1
Rows per page
Query Builder