CVE-2008-0854

CVE-2008-0854 is a SQL injection vulnerability in the Joomla!/Mambo com_salesrep component. The flaw allows remote attackers to inject arbitrary SQL via the rid parameter in the showrep action of index.php. According to NVD data, it has a CVSS v2 base score of 7.5 (HIGH); attack vector: NETWORK; ...

CVE-2008-0853

CVE-2008-0853 describes an SQL injection in the com_detail component of Joomla! and Mambo, exploitable via the id parameter to index.php. The underlying issue is a vulnerability in how user-supplied id values are used in SQL queries, enabling remote attackers to execute arbitrary SQL commands. Af...

CVE-2008-0855

CVE-2008-0855 describes an SQL injection in the Facile Forms (com_facileforms) component for Joomla! and Mambo, exploitable via the catid parameter to index.php. The vulnerability, as documented by NVD, has a base score of 7.5 (HIGH) with network attack vector, no authentication, and partial impa...

CVE-2008-0849

SQL injection vulnerability in index.php in the Downloads comdownloads component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the cat parameter in a selectcat function, a different vector than CVE-2008-0652...

CVE-2008-0853

SQL injection vulnerability in the comdetail component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php. NOTE: this issue might be site-specific. If so, it should not be included in CVE...

CVE-2008-0855

SQL injection vulnerability in the Facile Forms comfacileforms component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php...

Joomla! Mambo Component com_most - secid SQL Injection

Joomla! Mambo Component commost - secid SQL Injection source: https://www.securityfocus.com/bid/27922/info The Joomla! and Mambo 'commost' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting...

Joomla! / Mambo Component com_asortyment - 'katid' SQL Injection

source: https://www.securityfocus.com/bid/27923/info The Joomla! and Mambo 'comasortyment' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise...

Joomla! / Mambo Component com_most - 'secid' SQL Injection

source: https://www.securityfocus.com/bid/27922/info The Joomla! and Mambo 'commost' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

Joomla! / Mambo Component Referenzen - 'id' SQL Injection

source: https://www.securityfocus.com/bid/27926/info The Joomla! and Mambo Referenzen component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

CVE-2008-0841

SQL injection vulnerability in index.php in the Giorgio Nordo Ricette comricette 1.0 component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-0841

SQL injection vulnerability in index.php in the Giorgio Nordo Ricette comricette 1.0 component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-0841

The CVE-2008-0841 entry concerns a SQL injection in Joomla! and Mambo’s com_ricette 1.0 (Giorgio Nordo Ricette) where the vulnerable component is index.php and the id parameter can be manipulated by an attacker to execute arbitrary SQL commands remotely. This is supported by the NVD description a...

Sql injection

SQL injection vulnerability in index.php in the Kemas Antonius comquran 1.1 and earlier component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the surano parameter in a viewayat action...

CVE-2008-0832

CVE-2008-0832 : SQL injection in index.php of the Kemas Antonius com_quran 1.1 and earlier component for Mambo/Joomla! allows remote attackers to execute arbitrary SQL commands via the surano parameter in a viewayat action. The vulnerability affects the com_quran integration for Mambo/Joomla! up ...

CVE-2008-0832

SQL injection vulnerability in index.php in the Kemas Antonius comquran 1.1 and earlier component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the surano parameter in a viewayat action...

Joomla! Mambo Component com_Joomlavvz - id SQL Injection

Joomla! Mambo Component comJoomlavvz - id SQL Injection source: https://www.securityfocus.com/bid/27921/info The Joomla! and Mambo 'comjoomlavvz' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query...

mamboportfolio-sql.txt

Mambo component Portfolio Manager 1.0 comportfolio Author: it's my Home page: http://www.antichat.ru Dork: inurl:"index.php?option=comportfolio" Exploit:...

Joomla! / Mambo Component com_Joomlavvz - 'id' SQL Injection

source: https://www.securityfocus.com/bid/27921/info The Joomla! and Mambo 'comjoomlavvz' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise...

Sql injection

SQL injection vulnerability in jooget.php in the Joomlapixel Jooget! comjooget 2.6.8 component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail task...