EUVD-2009-2632

Malware in sbrugna...

EUVD-2007-4726

Malware in sbrugna...

CVE-2009-2638

SQL injection vulnerability in the AkoBook comakobook component 2.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the gbid parameter in a reply action to index.php...

Sql injection

SQL injection vulnerability in the AkoBook comakobook component 2.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the gbid parameter in a reply action to index.php...

CVE-2009-2638

SQL injection vulnerability in the AkoBook comakobook component 2.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the gbid parameter in a reply action to index.php...

CVE-2009-2638

CVE-2009-2638 describes an SQL injection vulnerability in the AkoBook (com_akobook) Joomla! component version 2.3. The underlying flaw is exploitable via the gbid parameter in a reply action to index.php, allowing remote attackers to inject arbitrary SQL commands. The NVD entry confirms a high se...

CVE-2009-2638: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the AkoBook comakobook component 2.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the gbid parameter in a reply action to index.php...

Joomla Component Akobook 2.3 (gbid) SQL Injection Vulnerability

No description provided by source. Joomla Component comakobook Vulnerability ---------------------------------------------------------------------- + Author : Ab1i + Email : [email protected] + Dork : inurl:index.php?option=comakobook Example:...

Joomla! Component Akobook 2.3 - gbid SQL Injection

Joomla! Component Akobook 2.3 - gbid SQL Injection Joomla Component comakobook Vulnerability ---------------------------------------------------------------------- + Author : Ab1i + Email : [email protected] + Dork : inurl:index.php?option=comakobook Example:...

Joomla Component Akobook 2.3 (gbid) SQL Injection Vulnerability

Exploit for unknown platform in category web applications =============================================================== Joomla Component Akobook 2.3 gbid SQL Injection Vulnerability =============================================================== Joomla Component comakobook Vulnerability...

Joomla Akobook 2.3 SQL Injection

Joomla Component comakobook Vulnerability ---------------------------------------------------------------------- + Author : Ab1i + Email : [email protected] + Dork : inurl:index.php?option=comakobook Example: http://localHost/path/components/index.php?option=comakobook&Itemid=36= SQL code Demo...

Joomla! Component Akobook 2.3 - 'gbid' SQL Injection

Joomla Component comakobook Vulnerability ---------------------------------------------------------------------- + Author : Ab1i + Email : [email protected] + Dork : inurl:index.php?option=comakobook Example: http://localHost/path/components/index.php?option=comakobook&Itemid=36= SQL code Demo...

CVE-2007-4745

Multiple cross-site scripting XSS vulnerabilities in the AkoBook 3.42 and earlier component comakobook for Mambo allow remote attackers to inject arbitrary web script or HTML via Javascript events in the 1 gbmail and 2 gbpage parameters in the sign function...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the AkoBook 3.42 and earlier component comakobook for Mambo allow remote attackers to inject arbitrary web script or HTML via Javascript events in the 1 gbmail and 2 gbpage parameters in the sign function...

CVE-2007-4745

AkoBook 3.42 and earlier (component com_akobook) for Mambo contain multiple cross-site scripting (XSS) vulnerabilities. The issue arises in the sign function, where attacker-controlled Javascript events in the parameters (gbmail and gbpage) can be injected to execute scripts in the victim’s brows...

CVE-2007-4745

Multiple cross-site scripting XSS vulnerabilities in the AkoBook 3.42 and earlier component comakobook for Mambo allow remote attackers to inject arbitrary web script or HTML via Javascript events in the 1 gbmail and 2 gbpage parameters in the sign function...

CVE-2007-4745: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the AkoBook 3.42 and earlier component comakobook for Mambo allow remote attackers to inject arbitrary web script or HTML via Javascript events in the 1 gbmail and 2 gbpage parameters in the sign function...

advisory-mambo-akobook-en.txt

Mambo Component AkoBook " are not allowed but simple quotes can still be used. The following code in one of the vulnerable inputs would result in a XSS:...