Joomla IotaPhotoGallery SQL Injection

/ Name : Joomla Component comiotaPhotoGallery Vuln : SQL Injection vulnerability Author : Hamza 'MizoZ' N. Email : mizozxatgmaildotcom Greetz : Zuka , Grey Hat Hackers / SQLI...

Joomla Gurujibook SQL Injection

/ Name : Joomla Component comgurujibook Vuln : SQL Injection vulnerability Author : Hamza 'MizoZ' N. Email : mizozxatgmaildotcom Greetz : Zuka , Grey Hat Hackers / SQLI HOST/PATH/index.php?option=comgurujibook&task=showPDF&bookid=-32+union+select+1,2,concatws0x3a,username,password,4+from+josusers...

CVE-2010-0381: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in modules/arcade/index.php in PHP MySpace Gold Edition 8.0 and 8.10 allows remote attackers to execute arbitrary SQL commands via the gid parameter in a showstats action. NOTE: the provenance of this information is unknown; the details are obtained solely from third...

Sql injection

SQL injection vulnerability in modules/arcade/index.php in PHP MySpace Gold Edition 8.0 and 8.10 allows remote attackers to execute arbitrary SQL commands via the gid parameter in a playgame action. NOTE: some of these details are obtained from third party information...

CVE-2010-0371

Affected software: Hitmaaan Gallery 1.3 (vulnerability in index.php). The flaw enables cross-site scripting (XSS) via the gall and levela parameters, allowing remote attackers to inject arbitrary web script or HTML. The NVD notes a medium base score (4.3, CVSS2) with no authentication needed and ...

CVE-2010-0371: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in index.php in Hitmaaan Gallery 1.3 allow remote attackers to inject arbitrary web script or HTML via the 1 gall and 2 levela parameters...

CVE-2010-0377: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in modules/arcade/index.php in PHP MySpace Gold Edition 8.0 and 8.10 allows remote attackers to execute arbitrary SQL commands via the gid parameter in a playgame action. NOTE: some of these details are obtained from third party information...

Sql injection

SQL injection vulnerability in the updateOnePage function in components/combfsurveypro/controller.php in BF Survey Pro Free combfsurveyprofree 1.2.4, and other versions before 1.2.6, a component for Joomla!, allows remote attackers to execute arbitrary SQL commands via the table parameter in an...

CVE-2009-4625

The CVE-2009-4625 entry concerns BF Survey Pro Free (com_bfsurvey_profree) for Joomla! where the updateOnePage action (table parameter) is vulnerable to SQL injection. Affected versions include 1.2.4 and other versions prior to 1.2.6. The vulnerability arises from improper validation of the table...

CVE-2009-4620

SQL injection vulnerability in the Joomloc comjoomloc component 1.0 for Joomla allows remote attackers to execute arbitrary SQL commands via the id parameter in an edit task to index.php...

CVE-2009-4620: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Joomloc comjoomloc component 1.0 for Joomla allows remote attackers to execute arbitrary SQL commands via the id parameter in an edit task to index.php...

CVE-2009-4619: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Lucy Games comlucygames component 1.5.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the gameid parameter in a game action to index.php. NOTE: some of these details are obtained from third party information...

CVE-2009-4623: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in Advanced Comment System 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the ACSpath parameter to 1 index.php and 2 admin.php in advancedcommentsystem/. NOTE: this might only be a vulnerability when the administrator has n...

Joomla Component com_prime Directory Traversal

Exploit for unknown platform in category web applications ============================================== Joomla Component comprime Directory Traversal ============================================== @email protected @=Script : Joomla Component comprime @=Author : FL0RiX @=Bug Type : Directory...

Joomla Uploader Shell Upload

|| || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ team wlhaan hacker | | // | | |...

Joomla Component com_jeeventcalendar Local File Inclusion

Exploit for php platform in category web applications ========================================================= Joomla Component comjeeventcalendar Local File Inclusion ========================================================= Author : altbta Email? : l9athotmailatcom? Script : Joomla Component...

CVE-2010-0319

CVE-2010-0319 is a documented Cross-Site Scripting (XSS) vulnerability in Docmint 1.0 and 2.1, exploitable via the id parameter in index.php. The issue allows remote attackers to inject arbitrary web script or HTML. Multiple sources (NVD, CVE lists) corroborate the affected software and impact, w...

CVE-2010-0321: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in jobs/index.php in Jamit Job Board 3.0 allows remote attackers to inject arbitrary web script or HTML via the postid parameter...

CVE-2010-0319: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in Docmint 1.0 and 2.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: some of these details are obtained from third party information...

Sql injection

Multiple SQL injection vulnerabilities in index.php in PHP Inventory 1.2 allow 1 remote authenticated users to execute arbitrary SQL commands via the userid parameter in a users details action, and allow remote attackers to execute arbitrary SQL commands via the 2 user username and 3 pass passwor...