13711 matches found
CVE-2010-1979: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in the Affiliate Datafeeds comdatafeeds component build 880 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php...
PHP Gamepage SQL Injection
, | ,---. , . |---. ,---. ,---. ,---. ,---. ,---. , . , | --- | | | | | |---' | | | |---' | | | | ---' ---| ---' ---' ---' ---' ------ ---' V PHP Gamepage SQL Injection Vulnerability --== Author ==-- + Author : v4lc0m87 + Contact : valcom87atgmaildotcom + Group : INDONESIAN CYBER + Site :...
CVE-2010-1954: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in the iNetLanka Multiple root commultiroot component 1.0 and 1.1 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. NOTE: some of these details are obtained from third party information...
CVE-2010-1956: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in the Gadget Factory comgadgetfactory component 1.0.0 and 1.5.0 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. NOTE: some of these details are obtained from third party information...
CVE-2010-1949: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the Online News Paper Manager comjnewspaper component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the cid parameter to index.php. NOTE: some of these details are obtained from third party information...
CVE-2010-1950: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the Online News Paper Manager comjnewspaper component 1.0 for Joomla!, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the dateinfo parameter to index.php. NOTE: the provenance of this information is unknown; the detail...
JE CMS version 1.1 SQL Injection Vulnerability
No description provided by source. ========================================================================================================================================================== o JE CMS SQL Injection Vulnerability Software : JE CMS version 1.1 Vendor : http://joenasejes.cz.cc/ Author...
CVE-2010-1952: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in the BeeHeard combeeheard and BeeHeard Lite combeeheardlite component 1.0 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php...
Tainos - Multiple Vulnerabilities
Tainos - Multiple Vulnerabilities ======================================================= Tainos Multiple Vulnerabilities ======================================================= Name: Tainos Multiple Vulnerabilities Vendor: www.tainos-webdesign.com Date: 2010/05/16 Author: Ashiyane Digital Securi...
Web Design Solutions SQL Injection
JAI HIND Tybe: SQL Injection Vulnerabilities Vendor: http://www.webdesignsolution.co.uk + author: мαsŧєяs + TEAM: H.O.H------ICW--------ANDHRAHACKERS D0rk: Us3 ur brain ? contact: rdon111 AT gmail.com ====================================================================================== SQL...
Joomla Component com_jequoteform Local File Inclusion
Exploit for php platform in category web applications ===================================================================== Joomla Component comjequoteform Local File Inclusion Vulnerabilities ===================================================================== Author : altbta Email :...
JE Ajax Event Calendar Local File Inclusion Vulnerability
Exploit for php platform in category web applications ========================================================= JE Ajax Event Calendar Local File Inclusion Vulnerability ========================================================= :::::::::::::::::::::::::::::::::::::: 0x1...
Sql injection
SQL injection vulnerability in index.php in Hi Web Wiesbaden Live Shopping Multi Portal System allows remote attackers to execute arbitrary SQL commands via the artikel parameter...
CVE-2010-1924
CVE-2010-1924 describes an SQL injection in index.php of the Hi Web Wiesbaden Live Shopping Multi Portal System, exploitable via the artikel parameter to execute arbitrary SQL commands. The affected component is the index.php entry point; root cause is insecure handling of user-supplied input in ...
CVE-2010-1924
SQL injection vulnerability in index.php in Hi Web Wiesbaden Live Shopping Multi Portal System allows remote attackers to execute arbitrary SQL commands via the artikel parameter...
724CMS Enterprise 4.59 SQL Injection
Exploit Title: 724CMS Enterprise Version 4.59 Multiple SQL Injections Date: 11-5-10 Author: t@nzo0n Version: 4.59 Enterprise Code : section.php x Variable : Lang x Exploit : http://target.com/section.php?Nav=Section&ID=5&Lang=sqlinjection index.php x Variable : autoslide x Exploit :...
CVE-2010-1924: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in Hi Web Wiesbaden Live Shopping Multi Portal System allows remote attackers to execute arbitrary SQL commands via the artikel parameter...
CVE-2009-4869
Cross-site scripting XSS vulnerability in index.php in Nasim Guest Book 1.2 allows remote attackers to inject arbitrary web script or HTML via the page parameter...
Sql injection
DISPUTED SQL injection vulnerability in index.php in TYPO3 4.0 allows remote attackers to execute arbitrary SQL commands via the showUid parameter. NOTE: the TYPO3 Security Team disputes this report, stating that "there is no such vulnerability... The showUid parameter is generally used in...