PT-2011-1957

Name of the Vulnerable Software and Affected Versions JExtensions JE Story Submit com jesubmit component version 1.4 for Joomla! Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the view parameter to the "index.php" API endpoint...

PT-2011-1976

Name of the Vulnerable Software and Affected Versions NP Gallery plugin version 0.94 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the id parameter in a plugin action within the index.php file of the NP Gallery plugin...

PT-2011-1906

Name of the Vulnerable Software and Affected Versions VideoWhisper PHP 2 Way Video Chat component for Joomla affected versions not specified Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or...

PT-2011-1944

Name of the Vulnerable Software and Affected Versions UTStats versions Beta 4 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the pid parameter in a "matchp" action in the index.php file. Recommendations For versions Beta 4 and...

PT-2011-1977

Name of the Vulnerable Software and Affected Versions DJ-ArtGallery com djartgallery version 0.9.1 for Joomla! Description The issue allows remote attackers to inject arbitrary web script or HTML via the cid parameter in an editItem action to "administrator/index.php". This is a cross-site...

PT-2011-1963

Name of the Vulnerable Software and Affected Versions JExtensions JE Job com jejob component version 1.0 for Joomla! Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the catid parameter in an item action to "index.php". Recommendation...

PT-2011-1932

Name of the Vulnerable Software and Affected Versions OlyKit Swoopo Clone 2010 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the id parameter in a product action within the index.php file. Recommendations For OlyKit Swoopo Clone...

PT-2011-1941

Name of the Vulnerable Software and Affected Versions EMO Realty Manager affected versions not specified Description A SQL injection issue exists, allowing remote attackers to execute arbitrary SQL commands. This is achieved via the cat1 parameter in the "googlemap/index.php" endpoint...

PT-2011-1955

Name of the Vulnerable Software and Affected Versions NetArt Media iBoutique version 4.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the page parameter in the index.php file. Recommendations For NetArt Media iBoutique version 4.0...

CVE-2010-5032: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the BF Quiz combfquiztrial component before 1.3.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a bfquiztrial action to index.php...

PT-2011-1978

Name of the Vulnerable Software and Affected Versions DJ-ArtGallery com djartgallery version 0.9.1 for Joomla! Description The issue allows remote authenticated users to execute arbitrary SQL commands. This is achieved by exploiting the cid parameter in an editItem action to...

PT-2011-1967

Name of the Vulnerable Software and Affected Versions Joomla! component com bfquiztrial versions prior to 1.3.1 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the catid parameter in a bfquiztrial action to "index.php". Recommendations For...

PT-2011-1979

Name of the Vulnerable Software and Affected Versions Joomla! component com searchlog version 3.1.0 Description The issue allows remote authenticated users with Public Back-end privileges to execute arbitrary SQL commands. This is achieved by exploiting the search parameter in a log action to the...

CVE-2010-4971: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in VideoWhisper PHP 2 Way Video Chat component for Joomla! allows remote attackers to inject arbitrary web script or HTML via the r parameter to index.php...

CVE-2010-5022: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the JExtensions JE Story Submit comjesubmit component 1.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the view parameter to index.php...

CVE-2010-5043: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the DJ-ArtGallery comdjartgallery component 0.9.1 for Joomla! allows remote authenticated users to execute arbitrary SQL commands via the cid parameter in an editItem action to administrator/index.php...

CVE-2010-5031: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in fileNice 1.1 allows remote attackers to inject arbitrary web script or HTML via the sstring parameter aka the Search Box. NOTE: some of these details are obtained from third party information...

PT-2011-1964

Name of the Vulnerable Software and Affected Versions Ecomat CMS version 5.0 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the show parameter in a web action in the index.php file. Recommendations For Ecomat CMS version 5.0, upda...

CVE-2010-4972

SQL injection vulnerability in index.php in YPNinc JokeScript allows remote attackers to execute arbitrary SQL commands via the ypncatid parameter...

Sql injection

SQL injection vulnerability in the Techjoomla SocialAds For JomSocial comsocialads component for Joomla! allows remote attackers to execute arbitrary SQL commands via the ads description field in a showad action to index.php...