CVE-2009-3480: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the iCRM Basic comicrmbasic component 1.4.2.31 for Joomla! allows remote attackers to execute arbitrary SQL commands via the p3 parameter to index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2009-3438: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the JoomlaFacebook comfacebook component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a student action to index.php...

CVE-2009-3443: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Fastball comfastball component 1.1.0 through 1.2 for Joomla! allows remote attackers to execute arbitrary SQL commands via the league parameter to index.php...

CVE-2009-3434: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Tupinambis comtupinambis component 1.0 for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the proyecto parameter in a verproyecto action to index.php...

Sql injection

SQL injection vulnerability in index.php in the Publisher module 2.0 for Miniweb allows remote attackers to execute arbitrary SQL commands via the historymonth parameter...

CVE-2009-3418: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Plume CMS 1.2.3 allow 1 remote authenticated users to execute arbitrary SQL commands via the m parameter to manager/index.php and 2 remote authenticated administrators to execute arbitrary SQL commands via the id parameter in an editlink action to...

CVE-2009-3419: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in the Publisher module 2.0 for Miniweb allows remote attackers to execute arbitrary SQL commands via the historymonth parameter...

CVE-2009-3417: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the IDoBlog comidoblog component 1.1 build 30 for Joomla! allows remote attackers to execute arbitrary SQL commands via the userid parameter in a profile action to index.php, a different vector than CVE-2008-2627...

CVE-2009-3420: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in index.php in the Publisher module 2.0 for Miniweb allow remote attackers to inject arbitrary web script or HTML via the 1 begin parameter and the 2 PATHINFO...

CVE-2009-3361

SQL injection vulnerability in index.php in PHP-IPNMonitor allows remote attackers to execute arbitrary SQL commands via the maincatid parameter...

CVE-2009-3356

SQL injection vulnerability in index.php in Image voting 1.0 allows remote attackers to execute arbitrary SQL commands via the show parameter...

Sql injection

SQL injection vulnerability in index.php in PHP-IPNMonitor allows remote attackers to execute arbitrary SQL commands via the maincatid parameter...

Sql injection

SQL injection vulnerability in index.php in Image voting 1.0 allows remote attackers to execute arbitrary SQL commands via the show parameter...

CVE-2009-3361

The CVE-2009-3361 entry covers a SQL injection in index.php of PHP-IPNMonitor, caused by unsafely using the maincat_id parameter. This allows remote attackers to execute arbitrary SQL commands. The affected software is PHP-IPNMonitor (index.php), but the connected documents do not specify exact v...

CVE-2009-3361

SQL injection vulnerability in index.php in PHP-IPNMonitor allows remote attackers to execute arbitrary SQL commands via the maincatid parameter...

Regental Medien - Blind SQL Injection

Regental Medien - Blind SQL Injection o Regental Medien Blind SQL Injection Vulnerability Software : Regental Medien Vendor : http://www.regental-medien.de/ Author : NoGe Home : http://antisecurity.org o Vulnerable file index.php o Exploit http://localhost/path/index.php?mainid=SQL o Proof of...

CVE-2009-3368: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Hotel Booking Reservation System aka HBS or comhbssearch component for Joomla! allows remote attackers to inject arbitrary web script or HTML via the adult parameter in a showhoteldetails action to index.php...

CVE-2009-3367: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in An image gallery 1.0 allow remote attackers to inject arbitrary web script or HTML via the path parameter to 1 index.php and 2 main.php, and the 3 show parameter to main.php. NOTE: the provenance of this information is unknown; the details are...

CVE-2009-3361: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in PHP-IPNMonitor allows remote attackers to execute arbitrary SQL commands via the maincatid parameter...

Regental Medien Blind SQL Injection

o Regental Medien Blind SQL Injection Vulnerability Software : Regental Medien Vendor : http://www.regental-medien.de/ Author : NoGe Home : http://antisecurity.org o Vulnerable file index.php o Exploit http://localhost/path/index.php?mainid=SQL o Proof of Concept...