CVE-2008-1848

CVE-2008-1848 describes a cross-site scripting (XSS) vulnerability in the joomlaXplorer (com_joomlaxplorer) component for Mambo/Joomla!

CVE-2008-1849

CVE-2008-1849 affects the joomlaXplorer (com_joomlaxplorer) component for Mambo/Joomla! up to version 1.6.2 and earlier. The vulnerability is a directory traversal in index.php, where a .. in the dir parameter of a show_error action can cause listing of arbitrary directories. This is a remote (ne...

CVE-2008-1848

Cross-site scripting XSS vulnerability in the joomlaXplorer comjoomlaxplorer Mambo/Joomla! component 1.6.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the error parameter in a showerror action to index.php...

CVE-2008-1849: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in the joomlaXplorer comjoomlaxplorer Mambo/Joomla! component 1.6.2 and earlier allows remote attackers to list arbitrary directories via a .. dot dot in the dir parameter in a showerror action...

CVE-2008-1848: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the joomlaXplorer comjoomlaxplorer Mambo/Joomla! component 1.6.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the error parameter in a showerror action to index.php...

joomlaextplorer-sql.txt

-------------------------------------------------------------------------------------------------------------- ----- H-T Team HouSSaMix + ToXiC350 from MoroCCo ---------------------------------------------------------...

Joomla! Component JoomlaXplorer 1.6.2 - Remote s

Joomla! Component JoomlaXplorer 1.6.2 - Remote s ------------------------------------------------------------- ----- H-T Team HouSSaMix + ToXiC350 from MoroCCo -------- ------------------------------------------------------------- = Author : HouSSaMix = Script : Joomla and Mambo Component...

Joomla! Component JoomlaXplorer 1.6.2 - Remote s

------------------------------------------------------------- ----- H-T Team HouSSaMix + ToXiC350 from MoroCCo -------- ------------------------------------------------------------- = Author : HouSSaMix = Script : Joomla and Mambo Component joomlaxplorer = version : 1.6.0 = Download :...

Joomla! Mambo Component Showroom Joomlearn LMS - cat SQL Injection

Joomla! Mambo Component Showroom Joomlearn LMS - cat SQL Injection source: https://www.securityfocus.com/bid/28586/info The Joomlearn LMS component for Joomla! and Mambo is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an S...

Joomla! / Mambo Component Showroom Joomlearn LMS - 'cat' SQL Injection

source: https://www.securityfocus.com/bid/28586/info The Joomlearn LMS component for Joomla! and Mambo is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromi...

mamboahsshop-sql.txt

Mambo Component comahsshop SQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 BLOG : http://my.opera.com/SQL-Injection/blog/ MAiL : [email protected] DORK 1 : allinurl: "comahsshop"do=default EXPLOiT 1 :...

Mambo Component ahsShop <= 1.51 (vara) SQL Injection Vulnerability

No description provided by source. Mambo Component comahsshop SQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 BLOG : http://my.opera.com/SQL-Injection/blog/ MAiL : [email protected] DORK 1 : allinurl: "comahsshop"do=default EXPLOiT 1 :...

Mambo Component ahsShop <= 1.51 (vara) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================== Mambo Component ahsShop = 1.51 vara SQL Injection Vulnerability ================================================================== Mambo Component comahsshop SQL Injection...

Mambo Component Ahsshop 1.51 - 'vara' SQL Injection

Mambo Component comahsshop SQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 BLOG : http://my.opera.com/SQL-Injection/blog/ MAiL : [email protected] DORK 1 : allinurl: "comahsshop"do=default EXPLOiT 1 :...

Mambo Component Ahsshop 1.51 - vara SQL Injection

Mambo Component Ahsshop 1.51 - vara SQL Injection Mambo Component comahsshop SQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 BLOG : http://my.opera.com/SQL-Injection/blog/ MAiL : [email protected] DORK 1 : allinurl: "comahsshop"do=default EXPLOiT 1 :...

CVE-2008-1540

CVE-2008-1540 affects the Datsogallery (com_datsogallery) 1.3.1 module for Joomla! and Mambo. It is a SQL injection vulnerability where an attacker can send a crafted id parameter in detail action to index.php to execute arbitrary SQL commands. The flaw arises from unsafe handling of user input i...

CVE-2008-1540: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Datsogallery comdatsogallery 1.3.1 module for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action to index.php. NOTE: the provenance of this information is unknown; the details are obtained solely...

Sql injection

SQL injection vulnerability in the Detodas Restaurante comrestaurante 1.0 component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action to index.php, a different product than CVE-2008-0562...

CVE-2008-1465

SQL injection vulnerability in the Detodas Restaurante comrestaurante 1.0 component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action to index.php, a different product than CVE-2008-0562...

CVE-2008-1465

CVE-2008-1465 describes a SQL injection vulnerability in the Restaurant extension (com_restaurant) 1.0 for Mambo and Joomla! where an attacker can craft the id parameter in index.php (detail action) to execute arbitrary SQL commands. Root cause: input unsafely concatenated into SQL. Impact: remot...