Sql injection

SQL injection vulnerability in the DJ-ArtGallery comdjartgallery component 0.9.1 for Joomla! allows remote authenticated users to execute arbitrary SQL commands via the cid parameter in an editItem action to administrator/index.php...

Sql injection

SQL injection vulnerability in index.php in UTStats Beta 4 and earlier allows remote attackers to execute arbitrary SQL commands via the pid parameter in a matchp action...

CVE-2010-5032

SQL injection vulnerability in the BF Quiz combfquiztrial component before 1.3.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a bfquiztrial action to index.php...

CVE-2010-5020

SQL injection vulnerability in index.php in NetArt Media iBoutique 4.0 allows remote attackers to execute arbitrary SQL commands via the page parameter...

CVE-2010-4971

Cross-site scripting XSS vulnerability in VideoWhisper PHP 2 Way Video Chat component for Joomla! allows remote attackers to inject arbitrary web script or HTML via the r parameter to index.php...

CVE-2010-5031

CVE-2010-5031 is a cross-site scripting (XSS) vulnerability in fileNice 1.1, affecting index.php via the sstring parameter (Search Box). Concrete details found: the vulnerability is XSS with arbitrary script/HTML injection possible through sstring. Affected component is fileNice 1.1 (index.php). ...

CVE-2010-5031

Cross-site scripting XSS vulnerability in index.php in fileNice 1.1 allows remote attackers to inject arbitrary web script or HTML via the sstring parameter aka the Search Box. NOTE: some of these details are obtained from third party information...

CVE-2010-5006

CVE-2010-5006 affects EMO Realty Manager, specifically the googlemap/index.php component. The issue is a SQL injection in the cat1 parameter that allows remote arbitrary SQL execution. This is documented by multiple connected sources (OpenVAS description and NVD entry). The provided documents do ...

CVE-2010-4997: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in OlyKit Swoopo Clone 2010 allows remote attackers to execute arbitrary SQL commands via the id parameter in a product action...

CVE-2010-5006: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in googlemap/index.php in EMO Realty Manager allows remote attackers to execute arbitrary SQL commands via the cat1 parameter...

CVE-2010-5028: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the JExtensions JE Job comjejob component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in an item action to index.php...

CVE-2010-5029: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Ecomat CMS 5.0 allows remote attackers to execute arbitrary SQL commands via the show parameter in a web action...

CVE-2010-5009: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in UTStats Beta 4 and earlier allows remote attackers to execute arbitrary SQL commands via the pid parameter in a matchp action...

CVE-2010-5020: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in NetArt Media iBoutique 4.0 allows remote attackers to execute arbitrary SQL commands via the page parameter...

CVE-2010-5041: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in the NPGallery plugin 0.94 for Nucleus allows remote attackers to execute arbitrary SQL commands via the id parameter in a plugin action...

CVE-2010-5032: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the BF Quiz combfquiztrial component before 1.3.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a bfquiztrial action to index.php...

CVE-2010-5030: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in Ecomat CMS 5.0 allows remote attackers to inject arbitrary web script or HTML via the lang parameter in a web action...

PT-2011-1957

Name of the Vulnerable Software and Affected Versions JExtensions JE Story Submit com jesubmit component version 1.4 for Joomla! Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the view parameter to the "index.php" API endpoint...

PT-2011-1955

Name of the Vulnerable Software and Affected Versions NetArt Media iBoutique version 4.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the page parameter in the index.php file. Recommendations For NetArt Media iBoutique version 4.0...

PT-2011-1964

Name of the Vulnerable Software and Affected Versions Ecomat CMS version 5.0 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the show parameter in a web action in the index.php file. Recommendations For Ecomat CMS version 5.0, upda...