CVE-2009-4784: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Joaktree comjoaktree component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the treeId parameter to index.php...

CVE-2009-4767

Technical details, affected versions, exploit steps, and remediation are not provided in the connected documents; monitor for updates.

CVE-2009-4767: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in index.php in Plohni Shoutbox 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 inputname and 2 inputtext parameters. NOTE: some of these details are obtained from third party information...

Sql injection

SQL injection vulnerability in the Multi-Venue Restaurant Menu Manager aka MVRMM or commvrestaurantmenumanager component 1.5.2 Stable Update 3 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the mid parameter in a menudisplay action to index.php...

CVE-2010-1479: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the RokModule comrokmodule component 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the moduleid parameter in a raw action to index.php...

CVE-2010-1473: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the Advertising comadvertising component 0.25 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the controller parameter to index.php...

Kleophatra CMS Cross Site Scripting

Exploit Title: Kleophatra CMS XSS Vulnerability Date: 19/4/2010 My home :www.Dev-Point.com Author: anT!-Tr0J4n Software Link:http://portal.kleophatra.org ===== Exploit XSS ====== Exploit : index.php?module= Xss http://localhost/kleo/index.php?module=1alertdocument.cookie...

CVE-2010-1480: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the RokModule comrokmodule component 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the module parameter to index.php. NOTE: some of these details are obtained from third party information...

CVE-2010-1472: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the Daily Horoscope comhoroscope component 1.5.0 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php...

CVE-2010-1470: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the Web TV comwebtv component 1.0 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the controller parameter to index.php...

CVE-2010-1474: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the Sweety Keeper comsweetykeeper component 1.5.x for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the controller parameter to index.php...

CVE-2010-1478: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the Ternaria Informatica Jfeedback! comjfeedback component 1.2 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the controller parameter to index.php...

WebAdmin - Arbitrary File Upload

Exploit Title: WebAdmin Shell Upload Vulnerability Date: 16.04.2010 Author: DigitALL Code : g00gle d0rk: inurl:webadmin.php Size · Permission · Owner · Group, Functions. 3xpl0it: You Edit index.php Or Shell Upload Greetz To: Efe KroNicKq NoFearx38 and All 1923Turk.Com Members...

CVE-2010-1461: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the Photo Battle comphotobattle component 1.0.1 for Joomla! allows remote attackers to read arbitrary files via the view parameter to index.php...

Joomla Component QPersonel SQL Injection Vulnerability

No description provided by source. Exploit Title: Joomla Component QPersonel SQL Injection Vulnerability Date: 13.04.2010 Author: Valentin Category: webapps/0day Version: XSS security fix from 31.12.2009, 1.02 and before Tested on: Debian Lenny, MySQL 5 CVE : Code :...

MKPortal Contact module XSS Vulnerability

========================================= MKPortal Contact module XSS Vulnerability ========================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' /' / /' 0 0 /, // ,/ / 1 1 // /' / // /' / /' 0 0 / / / / / / 1 1 / / 0 0 ////// // // //...

Sql injection

SQL injection vulnerability in index.php in Uiga Fan Club, as downloaded on 20100310, allows remote attackers to execute arbitrary SQL commands via the id parameter in a photos action...

CVE-2010-1364

SQL injection vulnerability in index.php in Uiga Personal Portal, as downloaded on 20100301, allows remote attackers to execute arbitrary SQL commands via the id parameter in a photos action. NOTE: some of these details are obtained from third party information...

CVE-2010-1365

SQL injection vulnerability in index.php in Uiga Fan Club, as downloaded on 20100310, allows remote attackers to execute arbitrary SQL commands via the id parameter in a photos action...

CVE-2010-1364

The CVE-2010-1364 entry describes a SQL injection vulnerability in the Uiga Personal Portal’s index.php, exploitable via the id parameter in the photos action. The underlying issue is likely improper input handling/sanitization allowing arbitrary SQL execution by remote attackers. Affected softwa...