CVE-2010-1733: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in OCS Inventory NG before 1.02.3 allow remote attackers to execute arbitrary SQL commands via 1 multiple inventory fields to the search form, reachable through index.php; or 2 the "Software name" field to the "All softwares" search form, reachable through...

Sql injection

Multiple SQL injection vulnerabilities in login.php in 2daybiz Auction Script allow remote attackers to execute arbitrary SQL commands via 1 the login field aka the username parameter, and possibly 2 the password field, to index.php. NOTE: some of these details are obtained from third party...

CVE-2010-1716: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Agenda Address Book comagenda component 1.0.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action to index.php...

CVE-2010-1714: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the Arcade Games comarcadegames component 1.0 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php...

CVE-2010-1657: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the SmartSite comsmartsite component 1.0.0 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php...

CVE-2010-1659: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the Ultimate Portfolio comultimateportfolio component 1.0 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php...

CVE-2010-1658: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the Code-Garage NoticeBoard comnoticeboard component 1.3 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the controller parameter to index.php...

CVE-2010-1656: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Airiny ABC comabc component 1.1.7 for Joomla! allows remote attackers to execute arbitrary SQL commands via the sectionid parameter in an abc action to index.php...

Puntal 2.1.0 Remote File Inclusion

==================================================== Puntal 2.1.0 Remote File Inclusion Vulnerability ==================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ ...

CVE-2010-1610

Cross-site request forgery CSRF vulnerability in index.php in OpenCart 1.4 allows remote attackers to hijack the authentication of an application administrator for requests that create an administrative account via a POST request with the route parameter set to "user/user/insert." NOTE: some of...

CVE-2010-1602

CVE-2010-1602 affects Joomla! ZiMB Comment component 0.8.1 (com_zimbcomment). The vulnerability is a Local File Inclusion via a directory traversal (.. in the controller parameter to index.php), allowing an attacker to read arbitrary files and potentially impact other areas. The Nuclei template c...

Joomla ABC Component "sectionid" SQL Injection Vulnerability

No description provided by source. A vulnerability has been discovered in the ABC component for Joomla, which can be exploited by malicious people to conduct SQL injection attacks. Input passed via the "sectionid" parameter to index.php when "option" is set to "comabc" is not properly sanitised...

CVE-2010-1610: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in index.php in OpenCart 1.4 allows remote attackers to hijack the authentication of an application administrator for requests that create an administrative account via a POST request with the route parameter set to "user/user/insert." NOTE: some of...

CVE-2010-1600: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Media Mall Factory commediamall component 1.0.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the category parameter to index.php...

CVE-2010-1594: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allow remote attackers to inject arbitrary web script or HTML via 1 the query string, 2 the BASE parameter, or 3 the ega1 parameter. NOTE: some of these details are obtained from third party...

CVE-2010-1595: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allow remote attackers to execute arbitrary SQL commands via the 1 c, 2 val1, or 3 ongletbis parameter...

CVE-2009-4822

Multiple cross-site scripting XSS vulnerabilities in index.php in Kasseler CMS 1.3.4 allow remote attackers to inject arbitrary web script or HTML via the 1 do, 2 id, and 3 uname parameters...

CVE-2009-4822: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in index.php in Kasseler CMS 1.3.4 allow remote attackers to inject arbitrary web script or HTML via the 1 do, 2 id, and 3 uname parameters...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in DFD Cart 1.198, 1.197, and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 category and 2 listquantity parameters to index.php, and the 3 category parameter to your.order.php...

CVE-2010-1541

Multiple cross-site scripting XSS vulnerabilities in DFD Cart 1.198, 1.197, and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 category and 2 listquantity parameters to index.php, and the 3 category parameter to your.order.php...