Directory traversal

Directory traversal vulnerability in the RokDownloads comrokdownloads component before 1.0.1 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. dot dot in the controller parameter to index.php...

Sql injection

Multiple SQL injection vulnerabilities in index.php in AudiStat 1.3 allow remote attackers to execute arbitrary SQL commands via the 1 year and 2 month parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2010-1043

Directory traversal vulnerability in index.php in jaxCMS 1.0 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the p parameter...

Sql injection

SQL injection vulnerability in index.php in AudiStat 1.3 allows remote attackers to execute arbitrary SQL commands via the mday parameter...

CVE-2010-1050

SQL injection vulnerability in index.php in AudiStat 1.3 allows remote attackers to execute arbitrary SQL commands via the mday parameter...

CVE-2010-1052

Multiple cross-site scripting XSS vulnerabilities in index.php in AudiStat 1.3 allow remote attackers to inject arbitrary web script or HTML via the 1 year and 2 mday parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Uiga Business Portal - index.php SQL Injection

Uiga Business Portal - index.php SQL Injection ----------------------------Information------------------------------------------------ +Name : Uiga Business Portal = index.php SQL Injection Vulnerability +Autor : Easy Laster +Date : 23.03.2010 +Script : Uiga Business Portal +Download :...

CVE-2010-1075: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Entry Level CMS EL CMS allows remote attackers to execute arbitrary SQL commands via the subj parameter...

CVE-2010-1076: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in Entry Level CMS EL CMS allows remote attackers to inject arbitrary web script or HTML via the subj parameter, which is not properly handled in a forced SQL error message. NOTE: the provenance of this information is unknown; the details are...

CVE-2010-1070: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in ImagoScripts Deviant Art Clone allows remote attackers to execute arbitrary SQL commands via the seid parameter in a forums viewcat action...

Discloser 'more' Parameter SQL Injection Vulnerability

The host is running Discloser and is prone to SQL injection vulnerability. OpenVAS Vulnerability Test $Id: secpoddisclosersqlinjvuln.nasl 5394 2017-02-22 09:22:42Z teissa $ Discloser 'more' Parameter SQL Injection Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2010 SecPod,...

CVE-2010-1081: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the Community Polls comcommunitypolls component 1.5.2, and possibly earlier, for Core Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php...

CVE-2010-1073: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the jEmbed-Embed Anything comjembed component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a summary action to index.php...

Zephyrus CMS SQL Injection

==================================================== Zephyrus CMS index.php SQL Injection Vulnerability ==================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //...

Zephyrus CMS (index.php) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ==================================================== Zephyrus CMS index.php SQL Injection Vulnerability ==================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' ...

Uiga Business Portal - 'index.php' SQL Injection

----------------------------Information------------------------------------------------ +Name : Uiga Business Portal = index.php SQL Injection Vulnerability +Autor : Easy Laster +Date : 23.03.2010 +Script : Uiga Business Portal +Download :...

CVE-2010-1047

CVE-2010-1047 describes an SQL injection in index.php for MASA2EL Music City 1.0 and 1.1 that allows remote attackers to execute arbitrary SQL via the id parameter in a singer action. The vulnerability is documented across CVE/NVD sources; exploitation status is not detailed in the provided docum...

CVE-2010-1050

AudiStat

CVE-2010-1052

CVE-2010-1052 affects AudiStat 1.3, with multiple XSS vulnerabilities in index.php exploitable via the year and mday parameters. The issue is documented across multiple feeds (NVD, RH, OpenVAS, etc.) as remote attacker‑driven script/HTML injection. The connected documents provide the vulnerabilit...

CVE-2010-1050

SQL injection vulnerability in index.php in AudiStat 1.3 allows remote attackers to execute arbitrary SQL commands via the mday parameter...