PT-2011-1782

Name of the Vulnerable Software and Affected Versions MHP Downloadshop affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands via the ItemID parameter in the view item.php file. This can lead to unauthorized access and manipulation of...

CVE-2010-4847: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in viewitem.php in MH Products MHP Downloadshop allows remote attackers to execute arbitrary SQL commands via the ItemID parameter...

CVE-2010-4846: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in viewitem.php in MH Products Pay Pal Shop Digital allows remote attackers to execute arbitrary SQL commands via the ItemID parameter...

PT-2011-1781

Name of the Vulnerable Software and Affected Versions MH Products Pay Pal Shop Digital affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the ItemID parameter in the "view item.php" file. Recommendations At the...

CVE-2011-2891: Exposure of Sensitive Information to an Unauthorized Actor

Joomla! 1.6.x before 1.6.2 allows remote attackers to obtain sensitive information via an empty Itemid array parameter to index.php, which reveals the installation path in an error message, a different vulnerability than CVE-2011-2488...

PT-2011-4177

Name of the Vulnerable Software and Affected Versions Joomla! versions 1.6.x through 1.6.1 Description The issue allows remote attackers to obtain sensitive information via an empty Itemid array parameter to "index.php", which reveals the installation path in an error message. Recommendations For...

CVE-2010-2910: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Ozio Gallery comoziogallery component for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter to index.php...

Joomla Component com_oziogallery SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================================ Joomla Component comoziogallery SQL Injection Vulnerability ============================================================ Author: ViRuS Qalaa Email: email protected My Sites :...

CVE-2010-2845: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the QuickFAQ comquickfaq component 1.0.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter in a category action to index.php...

Joomla Component QContacts (com_qcontacts) SQL Injection Vulnerability

No description provided by source. Exploit Title: Joomla Component QContacts comqcontacts - SQL Injection Vulnerability Date: 12, July 2010 Author: mlk Software Link: http://bugsec.googlecode.com/files/Joomlacomqcontacts.zip Version: 1.0.4 and previous Tested on: all OS CVE : 0 Code : here Joomla...

Joomla Component com_qcontacts SQL Injection Vulnerability

Exploit for php platform in category web applications ========================================================== Joomla Component comqcontacts SQL Injection Vulnerability ========================================================== Exploit Title: Joomla Component QContacts comqcontacts - SQL...

CVE-2010-2678

SQL injection vulnerability in xmap comxmap component for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter to index.php...

CVE-2010-2678: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in xmap comxmap component for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter to index.php...

CVE-2010-2342

SQL injection vulnerability in onlinenotebookmanager.asp in DMXReady Online Notebook Manager 1.0 allows remote attackers to execute arbitrary SQL commands via the ItemID parameter...

CVE-2010-2342: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in onlinenotebookmanager.asp in DMXReady Online Notebook Manager 1.0 allows remote attackers to execute arbitrary SQL commands via the ItemID parameter...

CVE-2010-2140

SQL injection vulnerability in itemdetail.php in Multishop CMS allows remote attackers to execute arbitrary SQL commands via the itemid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Sql injection

SQL injection vulnerability in itemdetail.php in Multishop CMS allows remote attackers to execute arbitrary SQL commands via the itemid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2010-2140: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in itemdetail.php in Multishop CMS allows remote attackers to execute arbitrary SQL commands via the itemid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Mambo Component 'com_acnews' - 'id' SQL Injection

Mambo Component comacnews id | SQL Injection Author: Zero Bits & Xzit3 Team: Ro0T-MaFia Member's: Zero Bits, CMD, Jeferx, Xzit3, XP3RM4 & Jeferx Date: 15/02/2010 Contact: [email protected] - [email protected] Country: Venezuela - Mexico Vulnerability's: + SQL Injection: Error: You hav...

Joomla Component com_productbook SQL Injection Vulnerability

No description provided by source. Joomla Component "comproductbook" SQL Injection Vulnerability ======================================================== .:. Author : Snakespc .:. Home : sec-war.com/cc .:. Script : Joomla .:. Bug Type : SQL Injection .:. Dork : inurl:"comproductbook" === Exploit...