CVE-2008-6481: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Versioning component comversioning 1.0.2 in Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the id parameter in an edit task to index.php...

Mambo CMS Detection (HTTP)

HTTP based detection of the Mambo CMS. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.100036";...

mambo Detection

This host is running mambo a widely installed Open Source cms solution. OpenVAS Vulnerability Test $Id: mambodetect.nasl 5737 2017-03-27 14:18:12Z cfi $ mambo Detection Authors: Michael Meyer Copyright: Copyright c 2009 Greenbone Networks GmbH This program is free software; you can redistribute i...

[ISecAuditors Security Advisories] eXtplorer Remote Code Execution

============================================= INTERNET SECURITY AUDITORS ALERT 2009-002 - Original release date: January 7th, 2009 - Last revised: March 2nd, 2009 - Discovered by: Juan Galiana Lara - Severity: 9/10 CVSS scored ============================================= I. VULNERABILITY...

Joomla/Mambo Component eXtplorer Code Execution Vulnerability

Exploit for unknown platform in category web applications ============================================================= Joomla/Mambo Component eXtplorer Code Execution Vulnerability ============================================================= ============================================= INTERNE...

Joomla! and Mambo JoomRadio Component 'id' Parameter SQL Injection Vulnerability

The JoomRadio component for Joomla! and Mambo is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit...

eXtplorer Code Execution

============================================= INTERNET SECURITY AUDITORS ALERT 2009-002 - Original release date: January 7th, 2009 - Last revised: March 2nd, 2009 - Discovered by: Juan Galiana Lara - Severity: 9/10 CVSS scored ============================================= I. VULNERABILITY...

Joomla! and Mambo gigCalendar Component SQLi Vulnerability - Active Check

The gigCalendar component for Joomla! and Mambo is prone to an SQL injection SQLi vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced...

Joomla! and Mambo gigCalendar Component SQL Injection Vulnerability

The gigCalendar component for Joomla! and Mambo is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit...

CVE-2009-0730

Multiple SQL injection vulnerabilities in the GigCalendar comgigcal component 1.0 for Mambo and Joomla!, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via 1 the gigcal venuesid parameter in a details action to index.php, which is not properly handled by...

Sql injection

SQL injection vulnerability in the GigCalendar comgigcal component 1.0 for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the gigcalgigsid parameter in a details action to index.php...

Sql injection

Multiple SQL injection vulnerabilities in the GigCalendar comgigcal component 1.0 for Mambo and Joomla!, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via 1 the gigcal venuesid parameter in a details action to index.php, which is not properly handled by...

CVE-2009-0726

SQL injection vulnerability in the GigCalendar comgigcal component 1.0 for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the gigcalgigsid parameter in a details action to index.php...

CVE-2009-0726

SQL injection vulnerability in the GigCalendar comgigcal component 1.0 for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the gigcalgigsid parameter in a details action to index.php...

CVE-2009-0726

The connected data confirms a SQL injection in Joomla/Mambo GigCalendar (com_gigcal) 1.0 via the gigcal_gigs_id parameter in the details action of index.php. Specifically, when magic_quotes_gpc is disabled, an unauthenticated remote attacker can manipulate database queries through gigdetails.php ...

CVE-2009-0730

The CVE-2009-0730 entry concerns the GigCalendar (com_gigcal) 1.0 component for Mambo/Joomla! with SQL injection vulnerabilities when magic_quotes_gpc is disabled. Concrete details from connected sources: two injection vectors in index.php details actions using parameters gigcal_venues_id and gig...

CVE-2009-0730

Multiple SQL injection vulnerabilities in the GigCalendar comgigcal component 1.0 for Mambo and Joomla!, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via 1 the gigcal venuesid parameter in a details action to index.php, which is not properly handled by...

CVE-2009-0730: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in the GigCalendar comgigcal component 1.0 for Mambo and Joomla!, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via 1 the gigcal venuesid parameter in a details action to index.php, which is not properly handled by...

CVE-2009-0726: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the GigCalendar comgigcal component 1.0 for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the gigcalgigsid parameter in a details action to index.php...

Sql injection

SQL injection vulnerability in the Simple Review comsimplereview component 1.3.5 for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the category parameter to index.php...