CVE-2010-4883: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in manager/index.php in MODx Revolution 2.0.2-pl allows remote attackers to inject arbitrary web script or HTML via the modhash parameter...

PT-2011-1818

Name of the Vulnerable Software and Affected Versions MODx Revolution version 2.0.2-pl Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the modhash parameter in the "manager/index.php" endpoint. Recommendations For MODx Revolution...

PT-2011-1805

Name of the Vulnerable Software and Affected Versions BloofoxCMS version 0.3.5 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the gender parameter in the "index.php" endpoint. Recommendations For BloofoxCMS version 0.3.5, consider restricting...

CVE-2010-4877: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in OneCMS 2.6.1 allows remote attackers to inject arbitrary web script or HTML via the view parameter...

PT-2011-1812

Name of the Vulnerable Software and Affected Versions OneCMS version 2.6.1 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the view parameter in the "index.php" file. Recommendations For OneCMS version 2.6.1, avoid using th...

CVE-2010-4870: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in BloofoxCMS 0.3.5 allows remote attackers to execute arbitrary SQL commands via the gender parameter...

CVE-2010-4869

SQL injection vulnerability in index.php in DBHcms 1.1.4 allows remote attackers to execute arbitrary SQL commands via the editmenu parameter...

CVE-2010-4859

SQL injection vulnerability in index.php in WebAsyst Shop-Script allows remote attackers to execute arbitrary SQL commands via the blogid parameter in a news action...

CVE-2010-4862

SQL injection vulnerability in the JExtensions JE Directory comjedirectory component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in an item action to index.php...

Sql injection

SQL injection vulnerability in index.php in DBHcms 1.1.4 allows remote attackers to execute arbitrary SQL commands via the editmenu parameter...

Sql injection

SQL injection vulnerability in index.php in Chipmunk Board 1.3 allows remote attackers to execute arbitrary SQL commands via the forumID parameter...

CVE-2010-4866

SQL injection vulnerability in index.php in Chipmunk Board 1.3 allows remote attackers to execute arbitrary SQL commands via the forumID parameter...

CVE-2010-4866

CVE-2010-4866 describes a SQL injection vulnerability in Chipmunk Board 1.3, specifically in index.php, allowing remote attackers to execute arbitrary SQL commands via the forumID parameter. The reports indicate a remote exploit path with a base score of 7.5 (HIGH) under CVSS v2, but the provided...

CVE-2010-4862

SQL injection vulnerability in the JExtensions JE Directory comjedirectory component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in an item action to index.php...

CVE-2010-4869

CVE-2010-4869 targets DBHcms 1.1.4, where a SQL injection flaw in index.php allows remote attackers to inject arbitrary SQL via the editmenu parameter. The CVSS2 base score is 7.5 (HIGH) with network attack vector, no authentication, and partial impact on confidentiality, integrity, and availabil...

PT-2011-1794

Name of the Vulnerable Software and Affected Versions WebAsyst Shop-Script affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the blog id parameter in a "news" action, specifically targeting the index.php file...

CVE-2010-4862: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the JExtensions JE Directory comjedirectory component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in an item action to index.php...

CVE-2010-4859: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in WebAsyst Shop-Script allows remote attackers to execute arbitrary SQL commands via the blogid parameter in a news action...

PT-2011-1800

Name of the Vulnerable Software and Affected Versions Joomla! component com jeguestbook version 1.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the d itemid parameter in an item detail action to index.php. Recommendations For...

PT-2011-1804

Name of the Vulnerable Software and Affected Versions DBHcms version 1.1.4 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the editmenu parameter in the index.php file. Recommendations For DBHcms version 1.1.4, avoid using the...