EUVD-2008-5185

Malware in sbrugna...

EUVD-2008-1541

Malware in sbrugna...

Joomla DatsoGallery 3.4.4 SQL Injection

Exploit Title : Joomla DatsoGallery Components 3.4.4 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 14/02/2019 Vendor Homepage : datso.fr Software Download Link : datso.fr/products.html Software Information Link :...

Joomla! and Mambo Datsogallery 1.3.1 Component - 'id' Parameter SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/28361/info The Datsogallery component for Joomla! and Mambo is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue...

Sql injection

SQL injection vulnerability in subvotepic.php in the Datsogallery comdatsogallery module 1.6 for Joomla! allows remote attackers to execute arbitrary SQL commands via the User-Agent HTTP header...

CVE-2008-5208

SQL injection vulnerability in subvotepic.php in the Datsogallery comdatsogallery module 1.6 for Joomla! allows remote attackers to execute arbitrary SQL commands via the User-Agent HTTP header...

CVE-2008-5208

SQL injection vulnerability in subvotepic.php in the Datsogallery comdatsogallery module 1.6 for Joomla! allows remote attackers to execute arbitrary SQL commands via the User-Agent HTTP header...

CVE-2008-5208

The provided connected documents confirm CVE-2008-5208 is a SQL injection in the DatsoGallery Joomla! component (com_datsogallery) specifically in sub_votepic.php for version 1.6, exploitable via the User-Agent header. An unauthenticated, remote attacker can send crafted input in the User-Agent h...

CVE-2008-5208: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in subvotepic.php in the Datsogallery comdatsogallery module 1.6 for Joomla! allows remote attackers to execute arbitrary SQL commands via the User-Agent HTTP header...

DatsoGallery Component for Joomla! sub_votepic.php User-Agent HTTP Header SQLi

The version of the DatsoGallery component for Joomla! or Mambo running on the remote host is affected by a SQL injection vulnerability in subvotepic.php due to improper sanitization of user-supplied input to the User-Agent header before using it to construct database queries. Regardless of the PH...

Joomla! Component Datsogallery 1.6 - Blind SQL Injection

Joomla! Component Datsogallery 1.6 - Blind SQL Injection \n"; fwrite$fs, $req; $res=fread$fs, 4096; fclose$fs; return $res; function xpl$condition, $pos global $normua; global $where; $xpl=rand1,100000."',1,ifasciisubstringselect password from users $where,$pos,1$condition,select '$normua',select...

Joomla! Component Datsogallery 1.6 - Blind SQL Injection

\n"; fwrite$fs, $req; $res=fread$fs, 4096; fclose$fs; return $res; function xpl$condition, $pos global $normua; global $where; $xpl=rand1,100000."',1,ifasciisubstringselect password from users $where,$pos,1$condition,select '$normua',select link from menu/"; return $xpl; //main echo 'Joomla...

CVE-2008-1540

SQL injection vulnerability in the Datsogallery comdatsogallery 1.3.1 module for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action to index.php. NOTE: the provenance of this information is unknown; the details are obtained solely...

Sql injection

SQL injection vulnerability in the Datsogallery comdatsogallery 1.3.1 module for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action to index.php. NOTE: the provenance of this information is unknown; the details are obtained solely...

CVE-2008-1540

SQL injection vulnerability in the Datsogallery comdatsogallery 1.3.1 module for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action to index.php. NOTE: the provenance of this information is unknown; the details are obtained solely...

CVE-2008-1540: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Datsogallery comdatsogallery 1.3.1 module for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action to index.php. NOTE: the provenance of this information is unknown; the details are obtained solely...

Joomla! / Mambo Component Datsogallery 1.3.1 - 'id' SQL Injection

source: https://www.securityfocus.com/bid/28361/info The Datsogallery component for Joomla! and Mambo is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromis...

Joomla! Mambo Component Datsogallery 1.3.1 - id SQL Injection

Joomla! Mambo Component Datsogallery 1.3.1 - id SQL Injection source: https://www.securityfocus.com/bid/28361/info The Datsogallery component for Joomla! and Mambo is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL...