PT-2011-4998

Name of the Vulnerable Software and Affected Versions Joomla! component Time Returns com timereturns versions 2.0 and possibly earlier Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the id parameter in a timereturns action to...

PT-2011-4995

Name of the Vulnerable Software and Affected Versions Zen Cart versions prior to 1.5 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the message parameter in a gv send action to "index.php". Recommendations For versions pri...

CVE-2011-4570: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Time Returns comtimereturns component 2.0 and possibly earlier versions for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a timereturns action to index.php...

CVE-2011-4541

The CVE-2011-4541 entry concerns Hastymail2 (version 2.1.1 prior to RC2) and is caused by a cross-site scripting (XSS) vulnerability in index.php where an attacker can inject script/HTML via the rs parameter in the mailbox Drafts action. Public references in NVD and CVE listings confirm the impac...

CVE-2011-4541: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in Hastymail2 2.1.1 before RC2 allows remote attackers to inject arbitrary web script or HTML via the rs parameter in a mailbox Drafts action...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Contao before 2.10.2 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to index.php in a 1 teachers.html or 2 teachers/ action...

CVE-2011-4563: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in JAKCMS 2.0.4.1, and possibly other versions before 2.2.6 2011-09-23, allows remote attackers to inject arbitrary web script or HTML via the userpost parameter in a PM request, related to tinymce. NOTE: some of these details are obtained from...

CVE-2011-4559: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Calendar module in vTiger CRM 5.2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the onlyforuser parameter in an index action to index.php...

PT-2011-4934

Name of the Vulnerable Software and Affected Versions Contao versions prior to 2.10.2 Description The issue allows remote attackers to inject arbitrary web script or HTML via the PATH INFO to index.php in specific actions, such as teachers.html or teachers/. This can lead to cross-site scripting...

PT-2011-4989

Name of the Vulnerable Software and Affected Versions Phorum version 5.2.18 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved by manipulating the PATH INFO to admin/index.php. Recommendations For Phorum version...

CVE-2011-4335: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Contao before 2.10.2 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to index.php in a 1 teachers.html or 2 teachers/ action...

PT-2011-4987

Name of the Vulnerable Software and Affected Versions vTiger CRM versions 5.2.1 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the onlyforuser parameter in an index action to the "index.php" endpoint. Recommendations For...

Hastymail 'rs' and 'rsargs[]' Parameters Remote Code Injection Vulnerabilities

The host is running Hastymail2 and is prone to remote code injection vulnerabilities. OpenVAS Vulnerability Test $Id: secpodhastymail2rsparamremotecodeinjvuln.nasl 7006 2017-08-25 11:51:20Z teissa $ Hastymail 'rs' and 'rsargs' Parameters Remote Code Injection Vulnerabilities Authors: Sooraj KS...

CVE-2010-5051

Cross-site scripting XSS vulnerability in admin/core/adminfunc.php in razorCMS 1.0 stable allows remote attackers to inject arbitrary web script or HTML via the content parameter in an edit action to admin/index.php...

Sql injection

SQL injection vulnerability in index.php in Almnzm 2.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-5061

The CVE-2010-5061 entry describes a SQL injection vulnerability in RSStatic’s index.php, exploitable via the maxarticles parameter. The underlying issue is improper handling of user-supplied input, allowing remote attackers to execute arbitrary SQL commands. Impact is described as partial confide...

CVE-2010-5059

SQL injection vulnerability in index.php in CMScout 2.0.8 allows remote attackers to execute arbitrary SQL commands via the album parameter in a photos action...

CVE-2010-5061: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in RSStatic allows remote attackers to execute arbitrary SQL commands via the maxarticles parameter...

CVE-2010-5059: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in CMScout 2.0.8 allows remote attackers to execute arbitrary SQL commands via the album parameter in a photos action...

CVE-2010-5056: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the GBU Facebook comgbufacebook component 1.0.5 for Joomla! allows remote attackers to execute arbitrary SQL commands via the faceid parameter in a showface action to index.php...