CVE-2010-4945

SQL injection vulnerability in the CamelcityDB comcamelcitydb2 component 2.2 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php...

CVE-2010-4930

Cross-site scripting XSS vulnerability in index.php in @mail Webmail before 6.2.0 allows remote attackers to inject arbitrary web script or HTML via the MailType parameter in a mail/auth/processlogin action...

CVE-2010-4940

The CVE-2010-4940 entry concerns WAnewsletter 2.1.2, where a flaw in the script index.php enables SQL injection through the id parameter. This allows remote attackers to construct and execute arbitrary SQL commands, with potential partial confidentiality, integrity, and availability impacts as in...

CVE-2010-4939

CVE-2010-4939 is a PHP remote file inclusion vulnerability affecting MailForm 1.2 (index.php). The underlying issue is unsafe handling of the theme parameter, allowing an attacker to include a URL and execute arbitrary PHP code on the server. CVSS v2 base score is 7.5 (HIGH) with network access, ...

PT-2011-1874

Name of the Vulnerable Software and Affected Versions MailForm version 1.2 Description The issue allows remote attackers to execute arbitrary PHP code via a URL in the theme parameter in the index.php file. Recommendations For MailForm version 1.2, consider restricting access to the index.php fil...

PT-2011-1880

Name of the Vulnerable Software and Affected Versions Joomla! component com camelcitydb2 version 2.2 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the id parameter in the "index.php" endpoint. Recommendations For version 2.2 of the...

PT-2011-1893

Name of the Vulnerable Software and Affected Versions Prado Portal version 1.2.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the page parameter in the "index.php" file. Recommendations For Prado Portal version 1.2.0, consider restricting...

CVE-2010-4926: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the TimeTrack comtimetrack component 1.2.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the ctid parameter in a timetrack action to index.php...

CVE-2010-4930: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in @mail Webmail before 6.2.0 allows remote attackers to inject arbitrary web script or HTML via the MailType parameter in a mail/auth/processlogin action...

CVE-2010-4929: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Joostina comezautos component for Joomla! allows remote attackers to execute arbitrary SQL commands via the firstCode parameter in a helpers action to index.php...

CVE-2010-4939: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in index.php in MailForm 1.2 allows remote attackers to execute arbitrary PHP code via a URL in the theme parameter...

CVE-2010-4940: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in WAnewsletter 2.1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

PT-2011-1862

Name of the Vulnerable Software and Affected Versions Joomla! component com restaurantguide version 1.0.0 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands via the id parameter in a "country" action to "index.php". Recommendations For version 1.0.0, avoid...

PT-2011-1876

Name of the Vulnerable Software and Affected Versions Joomla! affected versions not specified Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands via the PlayerID parameter in a player save action to "index.php". Recommendations At the moment, there is no...

PT-2011-1879

Name of the Vulnerable Software and Affected Versions Mambo and Joomla! affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the id parameter in a showExpertProfileDetailed action to index.php...

PT-2011-1872

Name of the Vulnerable Software and Affected Versions com amblog version 1.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the articleid or catid parameter to the "index.php" endpoint. Recommendations For version 1.0, consider restrictin...

CVE-2010-4941: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Teams comteams component 110281008091711 for Joomla! allows remote attackers to execute arbitrary SQL commands via the PlayerID parameter in a player save action to index.php...

CVE-2010-4958: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Prado Portal 1.2.0 allows remote attackers to execute arbitrary SQL commands via the page parameter...

PT-2011-1861

Name of the Vulnerable Software and Affected Versions Joomla! TimeTrack component version 1.2.4 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the ct id parameter in a timetrack action to the "index.php" endpoint. Recommendations Fo...

CVE-2010-4927: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Restaurant Guide comrestaurantguide component 1.0.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a country action to index.php...