PT-2011-5130

Name of the Vulnerable Software and Affected Versions Barter Sites component version 1.3 for Joomla! Description The issue allows remote authenticated users to inject arbitrary web script or HTML via several parameters, including listing title, description, homeurl, paystring, sell price, shippin...

PT-2011-5133

Name of the Vulnerable Software and Affected Versions SugarCRM versions 6.1 through 6.1.6 SugarCRM versions 6.2 through 6.2.3 SugarCRM versions 6.3 through 6.3.0RC2 SugarCRM versions 6.4 through 6.4.0beta0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is...

CVE-2011-4829: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the comlisting component in Barter Sites component 1.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the categoryid parameter to index.php...

PT-2011-5129

Name of the Vulnerable Software and Affected Versions Joomla! Barter Sites component version 1.3 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the category id parameter in the index.php API endpoint. Recommendations For Joomla!...

PT-2011-5127

Name of the Vulnerable Software and Affected Versions AutoSec Tools V-CMS version 1.0 Description The issue allows remote attackers to inject arbitrary web script or HTML, which can be achieved via two parameters: the p parameter to "redirect.php" and the box parameter to...

CVE-2011-4830: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the comlisting component in Barter Sites component 1.3 for Joomla! allow remote authenticated users to inject arbitrary web script or HTML via the 1 listingtitle, 2 description, 3 homeurl aka Website Address, 4 paystring aka Payment types...

PT-2011-5123

Name of the Vulnerable Software and Affected Versions com vikrealestate version 1.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the contract parameter in a results action and the imm parameter in a show action to "index.php"...

CVE-2011-4814

Multiple cross-site scripting XSS vulnerabilities in Dolibarr 3.1.0 RC and probably earlier allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 index.php, 2 admin/boxes.php, 3 comm/clients.php, 4 commande/index.php; and the optioncss parameter to 5 admin/ihm.php an...

CVE-2011-4802: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Dolibarr 3.1.0 RC and probably earlier allow remote authenticated users to execute arbitrary SQL commands via the 1 sortfield, 2 sortorder, and 3 sall parameters to user/index.php and b user/group/index.php; the id parameter to 4 info.php, 5 perms.php, 6...

CVE-2011-4809: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the HM Community comhmcommunity component before 1.01 for Joomla! allow remote attackers to inject arbitrary web script or HTML via the 1 language, 2 university, 3 persent, 4 companyname, 5 designation, 6 music, 7 books, 8 movies, 9 games, 10...

PT-2011-5115

Name of the Vulnerable Software and Affected Versions Joomla! component com hmcommunity version prior to 1.01 Description The issue allows remote attackers to inject arbitrary web script or HTML via multiple parameters in a save task for a profile to "index.php". The vulnerable parameters include...

PT-2011-5114

Name of the Vulnerable Software and Affected Versions Joomla! component com hmcommunity version prior to 1.01 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the id parameter in a 'fnd home' action to 'index.php'. Recommendations For...

Family CMS 2.7.2 - Multiple Persistent Cross-Site Scripting Vulnerabilities

FCMS2.7.2 cms and earlier multiple stored XSS Vulnerability =================================================================================== Exploit Title: FCMS2.7.2 cms multiple stored XSS Vulnerability Download link...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Hotaru.php in the Search plugin 1.3 for Hotaru CMS allow remote attackers to inject arbitrary web script or HTML via the 1 SITENAME parameter to adminindex.php, or the 2 return and 3 search parameters to index.php. NOTE: some of these details a...

Joomla component com_qcontacts 1.0.6 SQL injection

Exploit for php platform in category web applications Exploit Title: QContacts 1.0.6 Joomla component SQL injection Google Dork: inurl:"/components/comqcontacts/" Date: Decembar/08/2011 Author: Don BalcanCrew & BalcanHack Software Link: http://www.latenight-coding.com/joomla-addons/qcontacts.html...

Joomla! Component com_qcontacts 1.0.6 - SQL Injection

Exploit Title: QContacts 1.0.6 Joomla component SQL injection Google Dork: inurl:"/components/comqcontacts/" Date: Decembar/08/2011 Author: Don BalcanCrew & BalcanHack Software Link: http://www.latenight-coding.com/joomla-addons/qcontacts.html Version: 1.0.6 Tested on: Apache Vulnerability: This...

PT-2011-5016

Name of the Vulnerable Software and Affected Versions WordPress Users plugin version 1.3 and possibly earlier Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the uid parameter to the "index.php" endpoint. Recommendations For WordPress Users...

CVE-2011-4541

Cross-site scripting XSS vulnerability in index.php in Hastymail2 2.1.1 before RC2 allows remote attackers to inject arbitrary web script or HTML via the rs parameter in a mailbox Drafts action...

CVE-2011-4567: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in includes/templates/templatedefault/templates/tplgvsenddefault.php in Zen Cart before 1.5 allows remote attackers to inject arbitrary web script or HTML via the message parameter in a gvsend action to index.php, a different vulnerability than CVE-2011-4547...

PT-2011-4999

Name of the Vulnerable Software and Affected Versions Joomla! Estate Agent com estateagent component affected versions not specified Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved by manipulating the id parameter in a showEO action to...