Sql injection

SQL injection vulnerability in index.php in the eWriting comewriting 1.2.1 module for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the cat parameter in a selectcat action...

CVE-2008-1297

The CVE-2008-1297 entry concerns a SQL injection in the index.php of the eWriting (com_ewriting) 1.2.1 module used with Mambo/Joomla! . The vulnerability is triggered via the cat parameter in the selectcat action, enabling remote attackers to execute arbitrary SQL commands . This is the exact iss...

CVE-2008-1297

SQL injection vulnerability in index.php in the eWriting comewriting 1.2.1 module for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the cat parameter in a selectcat action...

Mambo Component eWriting 1.2.1 (cat) SQL Injection Vulnerability

No description provided by source. eWriting 1.2.1 - SQL injection Discovered by breakerunit & Don BHack b4lc4n.org Gretz to h4cky0u.org l r00tsecurity.org l h4cky0u.biz l Dorks: "Powered by eWriting 1.2.1 allinurl:"comewriting" Joomla!...

Joomla!/Mambo 'Candle' 'cid' SQL注入漏洞

BUGTRAQ ID: 28174 CNCAN ID:CNCAN-2008031106 Joomla!/Mambo 'Candle'是一款基于PHP的WEB应用程序。 Joomla!/Mambo 'Candle'不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL注入攻击，可获得敏感信息或操作数据库。 问题是由于脚本对用户提交的'cid'参数处理缺少充分过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 Son Vu Candle 1.0 目前没有详细解决方案提供： http://www.joomla.org/...

Mambo Components ensenanzas "id" Remote SQL Injection

Aria-Security Team Persian Security Network http://Aria-Security.Net/ ---------------------------- Shoutz: Aura, NULL, Kinglet, iM4N, Imm02tal Mambo Components ensenanzas "id" Remote SQL Injection Original Advisory: http://forum.aria-security.net/showthread.php?p=1731...

Joomla!/Mambo 'com_ewriting' 'Itemid'SQL注入漏洞

BUGTRAQ ID: 28179 CNCAN ID:CNCAN-2008031107 Joomla!/Mambo 'comewriting'是一款基于PHP的WEB应用程序。 Joomla!/Mambo 'comewriting'不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL注入攻击，可获得敏感信息或操作数据库。 问题是由于脚本对用户提交的'itemid'参数处理缺少充分过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 Meclazcke eWriting 1.2.1 目前没有详细解决方案提供：...

Joomla! Mambo Component ensenanzas - id SQL Injection

Joomla! Mambo Component ensenanzas - id SQL Injection source: https://www.securityfocus.com/bid/28196/info The 'ensenanzas' component for Joomla! and Mambo is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query...

Joomla! / Mambo Component ensenanzas - 'id' SQL Injection

source: https://www.securityfocus.com/bid/28196/info The 'ensenanzas' component for Joomla! and Mambo is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromis...

Mambo Component eWriting 1.2.1 (cat) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ Mambo Component eWriting 1.2.1 cat SQL Injection Vulnerability ================================================================ eWriting 1.2.1 - SQL injection Discovered by...

Mambo Component eWriting 1.2.1 - cat SQL Injection

Mambo Component eWriting 1.2.1 - cat SQL Injection eWriting 1.2.1 - SQL injection Discovered by breakerunit & Don BHack b4lc4n.org Gretz to h4cky0u.org l r00tsecurity.org l h4cky0u.biz l Dorks: "Powered by eWriting 1.2.1 allinurl:"comewriting" Joomla!...

Mambo Component eWriting 1.2.1 - 'cat' SQL Injection

eWriting 1.2.1 - SQL injection Discovered by breakerunit & Don BHack b4lc4n.org Gretz to h4cky0u.org l r00tsecurity.org l h4cky0u.biz l Dorks: "Powered by eWriting 1.2.1 allinurl:"comewriting" Joomla!...

CVE-2008-1137

SQL injection vulnerability in the Garys Cookbook comgaryscookbook 1.1.1 and earlier component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action to index.php...

Sql injection

SQL injection vulnerability in the Garys Cookbook comgaryscookbook 1.1.1 and earlier component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action to index.php...

CVE-2008-1137

CVE-2008-1137 is a SQL injection vulnerability in the Garys Cookbook (com_garyscookbook) component for Mambo/Joomla!

CVE-2008-1137

SQL injection vulnerability in the Garys Cookbook comgaryscookbook 1.1.1 and earlier component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action to index.php...

mambomusica-sql.txt

Aria-Security Team Persian Security Network http://Aria-Security.Net ------------------------------- Shoutz : AurA, imm02tal, Kinglet, iM4N, & All our staff Mambo comMusica "id" Remote SQL Injection index.php?option=commusica&Itemid=172&tasko=viewo...

Mambo Component com_Musica (id) Remote SQL Injection Vulnerability

No description provided by source. Aria-Security Team Persian Security Network http://Aria-Security.Net ------------------------------- Shoutz : AurA, imm02tal, Kinglet, iM4N, & All our staff Mambo comMusica "id" Remote SQL Injection index.php?option=commusica&Itemid=172&tasko=viewo...

Mambo com_Musica "id" Remote SQL Injection

Aria-Security Team Persian Security Network http://Aria-Security.Net ------------------------------- Shoutz : AurA, imm02tal, Kinglet, iM4N, & All our staff Mambo comMusica "id" Remote SQL Injection index.php?option=commusica&Itemid=172&tasko=viewo...

Mambo Component com_Musica (id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================== Mambo Component comMusica id Remote SQL Injection Vulnerability ================================================================== Aria-Security Team Persian Security Netwo...