CVE-2010-2851: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the BookLibrary From Same Author combooklibrary module 1.5 and possibly earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a view action to index.php...

CVE-2010-2845: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the QuickFAQ comquickfaq component 1.0.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter in a category action to index.php...

Joomla! Component com_iproperty - SQL Injection

Joomla! Component comiproperty - SQL Injection ==================================================== Joomla Component comiproperty SQL Injection Vulnerability ==================================================== Author : Amine92 Email : [email protected] Homepage : www.vbhacker.net/vb DORK :...

CVE-2009-4945

AdPeeps 8.5d1 has a default password of admin for the admin account, which makes it easier for remote attackers to obtain access via requests to index.php...

CVE-2009-4943

index.php in AdPeeps 8.5d1 allows remote attackers to obtain sensitive information via 1 a viewadrates action with an invalid uid parameter, which reveals the installation path in an error message; or 2 an adminlogin action with a crafted uid parameter, which reveals the version number...

CVE-2009-4939

Multiple cross-site scripting XSS vulnerabilities in index.php in AdPeeps 8.5d1 allow remote attackers to inject arbitrary web script or HTML via the 1 uid parameter, 2 uid parameter in a loginlookup action, 3 uid parameter in an adminlogin action, 4 campaignid parameter in a createcampaign actio...

CVE-2009-4945

AdPeeps 8.5d1 has a default password of admin for the admin account, which makes it easier for remote attackers to obtain access via requests to index.php...

Default credentials

AdPeeps 8.5d1 has a default password of admin for the admin account, which makes it easier for remote attackers to obtain access via requests to index.php...

CVE-2009-4940: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Zeus Cart 2.3 and earlier allows remote attackers to execute arbitrary SQL commands via the maincatid parameter in a showmaincatlanding action...

CVE-2009-4943: Exposure of Sensitive Information to an Unauthorized Actor

index.php in AdPeeps 8.5d1 allows remote attackers to obtain sensitive information via 1 a viewadrates action with an invalid uid parameter, which reveals the installation path in an error message; or 2 an adminlogin action with a crafted uid parameter, which reveals the version number...

CVE-2009-4939: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in index.php in AdPeeps 8.5d1 allow remote attackers to inject arbitrary web script or HTML via the 1 uid parameter, 2 uid parameter in a loginlookup action, 3 uid parameter in an adminlogin action, 4 campaignid parameter in a createcampaign actio...

CVE-2009-4938: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the JVideo! comjvideo component 0.3.11c Beta and 0.3.x for Joomla! allows remote attackers to execute arbitrary SQL commands via the userid parameter in a user action to index.php...

CVE-2009-4945: Undefined Security Weakness

AdPeeps 8.5d1 has a default password of admin for the admin account, which makes it easier for remote attackers to obtain access via requests to index.php...

GMDS CMS (index.php) SQL Injection Vulnerability

Exploit for php platform in category web applications ================================================ GMDS CMS index.php SQL Injection Vulnerability ================================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0...

D-Tekweb (index.php) SQL Injection Vulnerability

Exploit for php platform in category web applications ================================================ D-Tekweb index.php SQL Injection Vulnerability ================================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0...

Sql injection

SQL injection vulnerability in index.php in RightInPoint Lyrics Script 3.0 allows remote attackers to execute arbitrary SQL commands via the artistid parameter in an addalbum action...

CVE-2010-2714

SQL injection vulnerability in photos/index.php in TCW PHP Album 1.0 allows remote attackers to execute arbitrary SQL commands via the album parameter...

CVE-2010-2721

CVE-2010-2721 affects RightInPoint Lyrics Script 3.0. The vulnerability is a SQL injection in index.php via the artist_id parameter in an addalbum action, allowing remote attackers to execute arbitrary SQL commands. This is documented in multiple sources (e.g., NVD entry). The provided connected ...

CVE-2010-2722

CVE-2010-2722 describes an XSS vulnerability in RightInPoint Lyrics Script 3.0 (index.php) where the attacker can inject arbitrary script via the artist_id parameter, due to inadequate handling of data in a forced SQL error message. The affected component is the web interface’s index.php for Lyri...

CVE-2010-2721: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in RightInPoint Lyrics Script 3.0 allows remote attackers to execute arbitrary SQL commands via the artistid parameter in an addalbum action...