CVE-2009-0706

The CVE-2009-0706 issue affects the Simple Review (com_simple_review) Joomla!/Mambo component (1.3.5). The root cause is an SQL injection in the category parameter sent to index.php, enabling remote attackers to execute arbitrary SQL commands. The vulnerability is rated HIGH (CVSS v2 base 7.5). E...

CVE-2009-0706: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Simple Review comsimplereview component 1.3.5 for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the category parameter to index.php...

Joomla! Mambo Component gigCalendar 1.0 - banddetails.php SQL Injection

Joomla! Mambo Component gigCalendar 1.0 - banddetails.php SQL Injection source: https://www.securityfocus.com/bid/33859/info The gigCalendar component for Joomla! and Mambo is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in a...

Joomla! / Mambo Component gigCalendar 1.0 - 'banddetails.php' SQL Injection

source: https://www.securityfocus.com/bid/33859/info The gigCalendar component for Joomla! and Mambo is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise...

CVE-2008-6234

SQL injection vulnerability in the commusica module in Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php...

Sql injection

SQL injection vulnerability in the commusica module in Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php...

CVE-2008-6234

CVE-2008-6234 is a confirmed SQL injection in the com_musica module of Joomla! and Mambo, exploitable through the id parameter to index.php. The vulnerability allows remote attackers to execute arbitrary SQL commands, impacting databases associated with affected installations. Affected products a...

CVE-2008-6234

SQL injection vulnerability in the commusica module in Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php...

CVE-2008-6234: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the commusica module in Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php...

CVE-2009-0380

CVE-2009-0380 concerns the Sigsiu Online Business Index 2 (SOBI2, com_sobi2) for Joomla!/Mambo. The initial description states a SQL injection path via the bid parameter in a showbiz action to index.php (RC 2.8.2), with a separate note that CVE disputes this issue because neither “showbiz” nor “b...

CVE-2009-0380: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Sigsiu Online Business Index 2 SOBI2, comsobi2 RC 2.8.2 component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the bid parameter in a showbiz action to index.php, a different vector than CVE-2008-0607. NOTE: CVE disputes th...

Mambo Component com_sim 0.8 - Blind SQL Injection

Mambo Component comsim 0.8 - Blind SQL Injection xoron 1 $url = $argv1; $r = strlenfilegetcontents$url."+and+1=1--"; echo "\nExploiting:\n"; $w = strlenfilegetcontents$url."+and+1=0--"; $t = abs100-$w/$r100; echo "Username: "; for $i=1; $i $t-1 $count = $i; $i = 30; for $j = 1; $j $t-1 $laenge =...

Mambo com_sim v0.8 Blind SQL Injection Exploit

No description provided by source. ?php iniset"maxexecutiontime",0; printr' Mambo comsim Blind SQL Injection Exploit ----- xoron ----- [email protected] XORON c 2009 Tesekkurler: Ozan! kahrolsun!srail. WARNING!: php xoron.php...

Mambo Component com_sim 0.8 - Blind SQL Injection

xoron 1 $url = $argv1; $r = strlenfilegetcontents$url."+and+1=1--"; echo "\nExploiting:\n"; $w = strlenfilegetcontents$url."+and+1=0--"; $t = abs100-$w/$r100; echo "Username: "; for $i=1; $i $t-1 $count = $i; $i = 30; for $j = 1; $j $t-1 $laenge =...

Mambo com_sim v0.8 Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================== Mambo comsim v0.8 Blind SQL Injection Exploit ============================================== xoron 1 $url = $argv1; $r = strlenfilegetcontents$url."+and+1=1--"; echo "\nExploiting:\n"; $w =...

Mambo SOBI2 SQL Injection

|| || | || o,7 || . o7 || 4||| ow, : / / . +-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-+ | | | GaZa WiLL NeVeR DiE | | | | GoTo H3LL Israel & Usa | | | | Proud To Be A MusLiM , Proud To Be A EgYpTiaN | | | +-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-+ Found by :...

Mambo Component SOBI2 RC 2.8.2 (bid) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ Mambo Component SOBI2 RC 2.8.2 bid SQL Injection Vulnerability ================================================================...

Mambo Component SOBI2 RC 2.8.2 (bid) SQL Injection Vulnerability

No description provided by source. || || | || o,7 || . o7 || 4||| ow, : / / . +-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-+ | | | GaZa WiLL NeVeR DiE | | | | GoTo H3LL Israel & Usa | | | | Proud To Be A MusLiM , Proud To Be A EgYpTiaN | | |...

Mambo Component SOBI2 RC 2.8.2 - SQL Injection

Mambo Component SOBI2 RC 2.8.2 - SQL Injection || || | || o,7 || . o7 || 4||| ow, : / / . +-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-+ | | | GaZa WiLL NeVeR DiE | | | | | | Proud To Be A MusLiM , Proud To Be A EgYpTiaN | | |...

Mambo Component SOBI2 RC 2.8.2 - SQL Injection

|| || | || o,7 || . o7 || 4||| ow, : / / . +-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-+ | | | GaZa WiLL NeVeR DiE | | | | | | Proud To Be A MusLiM , Proud To Be A EgYpTiaN | | | +-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-+ Found by : Br1ght D@rk C0ntact :...