CVE-2010-4936: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Slide Show comslideshow component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php...

PT-2011-1875

Name of the Vulnerable Software and Affected Versions WAnewsletter version 2.1.2 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in the "index.php" file. Recommendations For WAnewsletter version 2.1.2, consider restricting...

PT-2011-1864

Name of the Vulnerable Software and Affected Versions Joomla! component com ezautos affected versions not specified Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. The issue is exploited via the firstCode parameter in a helpers action to "index.php"...

CVE-2010-4937: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in the Amblog comamblog component 1.0 for Joomla! allow remote attackers to execute arbitrary SQL commands via the 1 articleid or 2 catid parameter to index.php...

PT-2011-1871

Name of the Vulnerable Software and Affected Versions Joomla! com slideshow component affected versions not specified Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the catid parameter in the index.php API endpoint...

PT-2011-1873

Name of the Vulnerable Software and Affected Versions Joomla! affected versions not specified Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the Itemid parameter in a categories action to index.php in the Weblinks com...

CVE-2010-4945: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the CamelcityDB comcamelcitydb2 component 2.2 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php...

CVE-2010-4903

CVE-2010-4903 : CubeCart 4.3.3 contains a vulnerability in index.php where the searchStr parameter enables an SQL injection, allowing remote attackers to execute arbitrary SQL commands. The NVD entry lists a base score of 7.5 (HIGH) with network attack vector and low complexity, no authentication...

PT-2011-1833

Name of the Vulnerable Software and Affected Versions Joomla! Gantry com gantry component version 3.0.10 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the moduleid parameter to the "index.php" endpoint. Recommendations For version 3.0.10,...

CVE-2010-4903: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in CubeCart 4.3.3 allows remote attackers to execute arbitrary SQL commands via the searchStr parameter...

CVE-2010-4904: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Aardvertiser comaardvertiser component 2.1 and 2.1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catname parameter in a view action to index.php. NOTE: some of these details are obtained from third party information...

PT-2011-1837

Name of the Vulnerable Software and Affected Versions Joomla! component Clantools com clantools version 1.2.3 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the squad or showgame parameter to the "index.php" endpoint. Recommendations For...

PT-2011-1838

Name of the Vulnerable Software and Affected Versions CubeCart version 4.3.3 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the searchStr parameter in the "index.php" file. Recommendations For CubeCart version 4.3.3, update to a newer version...

CVE-2010-4898: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Gantry comgantry component 3.0.10 for Joomla! allows remote attackers to execute arbitrary SQL commands via the moduleid parameter to index.php...

CVE-2010-4902: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in the Clantools comclantools component 1.2.3 for Joomla! allow remote attackers to execute arbitrary SQL commands via the 1 squad or 2 showgame parameter to index.php...

CVE-2010-4870

SQL injection vulnerability in index.php in BloofoxCMS 0.3.5 allows remote attackers to execute arbitrary SQL commands via the gender parameter...

CVE-2010-4870

BloofoxCMS 0.3.5 is vulnerable to an SQL injection in index.php via the gender parameter, allowing remote attackers to execute arbitrary SQL commands. This CVE (CVE-2010-4870) is backed by multiple sources (NVD entry and OpenVAS/PRION listings) that confirm the flaw and impact (high severity, CVS...

PT-2011-1818

Name of the Vulnerable Software and Affected Versions MODx Revolution version 2.0.2-pl Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the modhash parameter in the "manager/index.php" endpoint. Recommendations For MODx Revolution...

CVE-2010-4877: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in OneCMS 2.6.1 allows remote attackers to inject arbitrary web script or HTML via the view parameter...

CVE-2010-4870: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in BloofoxCMS 0.3.5 allows remote attackers to execute arbitrary SQL commands via the gender parameter...