CVE-2010-2342: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in onlinenotebookmanager.asp in DMXReady Online Notebook Manager 1.0 allows remote attackers to execute arbitrary SQL commands via the ItemID parameter...

CVE-2010-2140

SQL injection vulnerability in itemdetail.php in Multishop CMS allows remote attackers to execute arbitrary SQL commands via the itemid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Sql injection

SQL injection vulnerability in itemdetail.php in Multishop CMS allows remote attackers to execute arbitrary SQL commands via the itemid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2009-4578

Cross-site scripting XSS vulnerability in the Facileforms comfacileforms component for Joomla! and Mambo allows remote attackers to inject arbitrary web script or HTML via the Itemid parameter to index.php...

CVE-2009-4579

Cross-site scripting XSS vulnerability in the Artist avenue comartistavenue component for Joomla! and Mambo allows remote attackers to inject arbitrary web script or HTML via the Itemid parameter to index.php...

Cross site scripting

Cross-site scripting XSS vulnerability in the Artist avenue comartistavenue component for Joomla! and Mambo allows remote attackers to inject arbitrary web script or HTML via the Itemid parameter to index.php...

CVE-2009-4579

Cross-site scripting XSS vulnerability in the Artist avenue comartistavenue component for Joomla! and Mambo allows remote attackers to inject arbitrary web script or HTML via the Itemid parameter to index.php...

CVE-2009-4579: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Artist avenue comartistavenue component for Joomla! and Mambo allows remote attackers to inject arbitrary web script or HTML via the Itemid parameter to index.php...

CVE-2009-4578: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Facileforms comfacileforms component for Joomla! and Mambo allows remote attackers to inject arbitrary web script or HTML via the Itemid parameter to index.php...

Sql injection

SQL injection vulnerability in index.cfm in CF ShopKart 5.4 beta allows remote attackers to execute arbitrary SQL commands via the itemid parameter in a ViewDetails action, a different vector than CVE-2008-6320...

CVE-2009-2782

CVE-2009-2782 is a SQL injection vulnerability affecting the Joomla! JFusion (com_jfusion) component. The issue allows remote attackers to manipulate the database by injecting arbitrary SQL through the Itemid parameter sent to index.php. Public references note exploitation activity (e.g., exploit...

CVE-2009-2782: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the JFusion comjfusion component for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter to index.php...

Sql injection

SQL injection vulnerability in the content component comcontent 1.0.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter in a blogcategory action to index.php...

CVE-2008-6923

SQL injection vulnerability in the content component comcontent 1.0.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter in a blogcategory action to index.php...

Sql injection

SQL injection vulnerability in censura.php in Censura 1.16.04 allows remote attackers to execute arbitrary SQL commands via the itemid parameter in a details action...

CVE-2009-2594

Cross-site scripting XSS vulnerability in censura.php in Censura 1.16.04 allows remote attackers to inject arbitrary web script or HTML via the itemid parameter in a details action...

CVE-2009-2593

SQL injection vulnerability in censura.php in Censura 1.16.04 allows remote attackers to execute arbitrary SQL commands via the itemid parameter in a details action...

Cross site scripting

Cross-site scripting XSS vulnerability in censura.php in Censura 1.16.04 allows remote attackers to inject arbitrary web script or HTML via the itemid parameter in a details action...

CVE-2009-2594

CVE-2009-2594 is an XSS vulnerability in censura.php (Censura 1.16.04) that lets remote attackers inject arbitrary web script or HTML via the itemid parameter in a details action. Affected component: censura.php in Censura 1.16.04. Root cause/attack method not explicitly detailed beyond XSS. Impa...

CVE-2009-2239

SQL injection vulnerability in the 1 casinobase comcasinobase, 2 casinoblackjack comcasinoblackjack, and 3 casinovideopoker comcasinovideopoker components 0.3.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter to index.php...