Sql injection

SQL injection vulnerability in the comsalesrep component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the rid parameter in a showrep action to index.php...

Joomla! Mambo Component com_most - secid SQL Injection

Joomla! Mambo Component commost - secid SQL Injection source: https://www.securityfocus.com/bid/27922/info The Joomla! and Mambo 'commost' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting...

CVE-2008-0849

CVE-2008-0849 is a SQL injection in index.php of the Downloads (com_downloads) component for Mambo/Joomla, exploitable via the cat parameter in a selectcat function. This is a different vector than CVE-2008-0652 (which uses filecatid in a selectfolder action). Connected sources confirm the affect...

CVE-2008-0855

SQL injection vulnerability in the Facile Forms comfacileforms component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php...

CVE-2008-0855: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Facile Forms comfacileforms component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php...

Joomla! / Mambo Component Referenzen - 'id' SQL Injection

source: https://www.securityfocus.com/bid/27926/info The Joomla! and Mambo Referenzen component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

CVE-2008-0853

SQL injection vulnerability in the comdetail component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php. NOTE: this issue might be site-specific. If so, it should not be included in CVE...

CVE-2008-0854: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the comsalesrep component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the rid parameter in a showrep action to index.php...

CVE-2008-0853: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the comdetail component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php. NOTE: this issue might be site-specific. If so, it should not be included in CVE...

CVE-2008-0854

CVE-2008-0854 is a SQL injection vulnerability in the Joomla!/Mambo com_salesrep component. The flaw allows remote attackers to inject arbitrary SQL via the rid parameter in the showrep action of index.php. According to NVD data, it has a CVSS v2 base score of 7.5 (HIGH); attack vector: NETWORK; ...

CVE-2008-0855

CVE-2008-0855 describes an SQL injection in the Facile Forms (com_facileforms) component for Joomla! and Mambo, exploitable via the catid parameter to index.php. The vulnerability, as documented by NVD, has a base score of 7.5 (HIGH) with network attack vector, no authentication, and partial impa...

Joomla! Mambo Component com_asortyment - katid SQL Injection

Joomla! Mambo Component comasortyment - katid SQL Injection source: https://www.securityfocus.com/bid/27923/info The Joomla! and Mambo 'comasortyment' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query...

Joomla! Mambo Component Referenzen - id SQL Injection

Joomla! Mambo Component Referenzen - id SQL Injection source: https://www.securityfocus.com/bid/27926/info The Joomla! and Mambo Referenzen component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting...

CVE-2008-0853

CVE-2008-0853 describes an SQL injection in the com_detail component of Joomla! and Mambo, exploitable via the id parameter to index.php. The underlying issue is a vulnerability in how user-supplied id values are used in SQL queries, enabling remote attackers to execute arbitrary SQL commands. Af...

CVE-2008-0849

SQL injection vulnerability in index.php in the Downloads comdownloads component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the cat parameter in a selectcat function, a different vector than CVE-2008-0652...

Joomla! / Mambo Component com_asortyment - 'katid' SQL Injection

source: https://www.securityfocus.com/bid/27923/info The Joomla! and Mambo 'comasortyment' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise...

Joomla! / Mambo Component com_most - 'secid' SQL Injection

source: https://www.securityfocus.com/bid/27922/info The Joomla! and Mambo 'commost' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

CVE-2008-0849: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in the Downloads comdownloads component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the cat parameter in a selectcat function, a different vector than CVE-2008-0652...

CVE-2008-0841

SQL injection vulnerability in index.php in the Giorgio Nordo Ricette comricette 1.0 component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-0841

SQL injection vulnerability in index.php in the Giorgio Nordo Ricette comricette 1.0 component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the id parameter...