CVE-2010-4972

SQL injection vulnerability in index.php in YPNinc JokeScript allows remote attackers to execute arbitrary SQL commands via the ypncatid parameter...

Sql injection

SQL injection vulnerability in the Techjoomla SocialAds For JomSocial comsocialads component for Joomla! allows remote attackers to execute arbitrary SQL commands via the ads description field in a showad action to index.php...

Sql injection

SQL injection vulnerability in the NeoRecruit comneorecruit component 1.6.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter in an offerview action to index.php, a different vector than CVE-2007-4506...

CVE-2010-4968

SQL injection vulnerability in the webmaster-tips.net Flash Gallery comwmtpic component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter to index.php...

Sql injection

SQL injection vulnerability in index.php in esoftpro Online Photo Pro 2.0 allows remote attackers to execute arbitrary SQL commands via the section parameter...

CVE-2010-4999

CVE-2010-4999 corresponds to an SQL injection vulnerability in esoftpro Online Photo Pro 2.0, exploitable via the section parameter in index.php. The connected documents confirm the affected component and describe the vulnerability as enabling remote SQL command execution, but do not provide tech...

CVE-2010-5003: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the AutarTimonial comautartimonial component 1.0.8 for Joomla! allows remote attackers to execute arbitrary SQL commands via the limit parameter in an autartimonial action to index.php. NOTE: some of these details are obtained from third party information...

CVE-2010-4975: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Techjoomla SocialAds For JomSocial comsocialads component for Joomla! allows remote attackers to execute arbitrary SQL commands via the ads description field in a showad action to index.php...

CVE-2010-4968: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the webmaster-tips.net Flash Gallery comwmtpic component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter to index.php...

CVE-2010-4990: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Front-edit Address Book comaddressbook component for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter in a contact action to index.php...

CVE-2010-4972: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in YPNinc JokeScript allows remote attackers to execute arbitrary SQL commands via the ypncatid parameter...

CVE-2010-4999: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in esoftpro Online Photo Pro 2.0 allows remote attackers to execute arbitrary SQL commands via the section parameter...

PT-2011-1912

Name of the Vulnerable Software and Affected Versions Canteen com canteen component version 1.0 for Joomla! Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the mealid parameter in the API endpoint "index.php" to execute SQL injection...

PT-2011-1928

Name of the Vulnerable Software and Affected Versions Joomla! component eventcal com eventcal version 1.6.4 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the Itemid parameter in the "index.php" endpoint. Recommendations For version...

PT-2011-1903

Name of the Vulnerable Software and Affected Versions com wmtpic version 1.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the Itemid parameter in the "/index.php" API endpoint. Recommendations For version 1.0, avoid using the Item...

PT-2011-1925

Name of the Vulnerable Software and Affected Versions Joomla! component com addressbook affected versions not specified Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved by manipulating the Itemid parameter in a contact action to the...

CVE-2010-4977: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in menu.php in the Canteen comcanteen component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the mealid parameter to index.php...

CaupoShop Pro (2.x/ <= 3.70) Classic 3.01 Local File Include Vulnerability

Exploit for php platform in category web applications CaupoShop Pro 2.x/ = 3.70 Local File Include Vulnerability ----------------------------------------------------------------------------------------- Vuln Softwares : CaupoShop Pro 2.x CaupoShop Classic 3.01 CaupoShop Pro 3.70 Discovered By :...

PT-2011-1930

Name of the Vulnerable Software and Affected Versions Joomla! component NeoRecruit com neorecruit version 1.6.4 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the Itemid parameter in an offer view action to "index.php"...

PT-2011-1926

Name of the Vulnerable Software and Affected Versions Joomla! component com ninjamonials affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the Itemid parameter in a "display" action to "index.php"...