CVE-2008-0801

SQL injection vulnerability in index.php in the PAXXGallery compaxxgallery 0.2 component for Mambo and Joomla! allow remote attackers to execute arbitrary SQL commands via 1 the iid parameter in a view action, and possibly 2 the userid parameter...

CVE-2008-0801

The CVE-2008-0801 entry describes an SQL injection in the PAXXGallery (com_paxxgallery) 0.2 component for Mambo/Joomla!, exploitable remotely via (1) iid in a view action and possibly (2) userid parameter. Affected software is PAXXGallery 0.2 for Mambo/Joomla!; root cause is improper sanitization...

CVE-2008-0795

CVE-2008-0795 affects the MGFi XfaQ (com_xfaq) 1.2 component for Mambo/Joomla!. The vulnerability is in index.php of the component where an SQL injection can be triggered through the aid parameter in an answer action, allowing remote attackers to execute arbitrary SQL commands. The NVD assessment...

CVE-2008-0799

SQL injection vulnerability in index.php in the Quiz comquiz 0.81 and earlier component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the tid parameter in a usertstshw action...

Joomla! Mambo Component com_smslist - listid SQL Injection

Joomla! Mambo Component comsmslist - listid SQL Injection source: https://www.securityfocus.com/bid/27818/info The Joomla! and Mambo 'comsmslist' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query...

Joomla! Mambo Component com_scheduling - id SQL Injection

Joomla! Mambo Component comscheduling - id SQL Injection source: https://www.securityfocus.com/bid/27830/info The Joomla! and Mambo 'comscheduling' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query...

Mambo Component Quran <= 1.1 (surano) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================= Mambo Component Quran = 1.1 surano SQL Injection Vulnerability =================================================================...

Joomla! Mambo Component com_activities - id SQL Injection

Joomla! Mambo Component comactivities - id SQL Injection source: https://www.securityfocus.com/bid/27820/info The Joomla! and Mambo 'comactivities' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query...

Joomla! Mambo Component com_sg - pid SQL Injection

Joomla! Mambo Component comsg - pid SQL Injection source: https://www.securityfocus.com/bid/27821/info The Joomla! and Mambo 'comsg' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this...

Joomla! Mambo Component faq - catid SQL Injection

Joomla! Mambo Component faq - catid SQL Injection source: https://www.securityfocus.com/bid/27822/info The Joomla! and Mambo 'faq' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this iss...

CVE-2008-0799: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in the Quiz comquiz 0.81 and earlier component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the tid parameter in a usertstshw action...

Joomla! / Mambo Component com_scheduling - 'id' SQL Injection

source: https://www.securityfocus.com/bid/27830/info The Joomla! and Mambo 'comscheduling' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise...

mamboquran-sql.txt

+----------------------------------------------------------------------------------------------------------------------------------------------------------------------+ --found by breakerunit and Don...

Joomla! Mambo Component com_salesrep - rid SQL Injection

Joomla! Mambo Component comsalesrep - rid SQL Injection source: https://www.securityfocus.com/bid/27827/info The Joomla! and Mambo 'comsalesrep' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query...

CVE-2008-0795: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in the MGFi XfaQ comxfaq 1.2 component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the aid parameter in an answer action...

Joomla! / Mambo Component faq - 'catid' SQL Injection

source: https://www.securityfocus.com/bid/27822/info The Joomla! and Mambo 'faq' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

Mambo Component Quran 1.1 - 'surano' SQL Injection

+----------------------------------------------------------------------------------------------------------------------------------------------------------------------+ --found by breakerunit and Don...

Joomla! / Mambo Component com_activities - 'id' SQL Injection

source: https://www.securityfocus.com/bid/27820/info The Joomla! and Mambo 'comactivities' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise...

Joomla! / Mambo Component com_salesrep - 'rid' SQL Injection

source: https://www.securityfocus.com/bid/27827/info The Joomla! and Mambo 'comsalesrep' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise t...

Mambo Component Quran 1.1 - surano SQL Injection

Mambo Component Quran 1.1 - surano SQL Injection +----------------------------------------------------------------------------------------------------------------------------------------------------------------------+ --found by breakerunit and Don...