CVE-2010-1720

SQL injection vulnerability in the Q-Personel comqpersonel component 1.0.2 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the katid parameter in a qpListele action to index.php...

CVE-2010-1720

CVE-2010-1720 describes a SQL injection vulnerability in Joomla! component Q-Personel (com_qpersonel) 1.0.2 and earlier. The flaw allows remote attackers to execute arbitrary SQL commands via the katid parameter in a qpListele action to index.php. Documents confirm affected software and root caus...

CVE-2010-1720: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Q-Personel comqpersonel component 1.0.2 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the katid parameter in a qpListele action to index.php...

Flex File Manager Shell Upload Vulnerability

Exploit for php platform in category web applications ============================================ Flex File Manager Shell Upload Vulnerability ============================================ Flex File Manager Shell Upload Vulnerability Author: Mr.MLL Published: 2010-04-19 Verified: yes Download...

Joomla QPersonal SQL Injection

Exploit Title: Joomla Component QPersonel SQL Injection Vulnerability Date: 13.04.2010 Author: Valentin Category: webapps/0day Version: XSS security fix from 31.12.2009, 1.02 and before Tested on: CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: |::...

Joomla Component QPersonel SQL Injection Vulnerability

No description provided by source. Exploit Title: Joomla Component QPersonel SQL Injection Vulnerability Date: 13.04.2010 Author: Valentin Category: webapps/0day Version: XSS security fix from 31.12.2009, 1.02 and before Tested on: Debian Lenny, MySQL 5 CVE : Code :...

Joomla! Component QPersonel 1.0.2 - SQL Injection

Joomla! Component QPersonel 1.0.2 - SQL Injection Exploit Title: Joomla Component QPersonel SQL Injection Vulnerability Date: 13.04.2010 Author: Valentin Category: webapps/0day Version: XSS security fix from 31.12.2009, 1.02 and before Tested on: Debian Lenny, MySQL 5 CVE : Code :...

Joomla! Component QPersonel 1.0.2 - SQL Injection

Exploit Title: Joomla Component QPersonel SQL Injection Vulnerability Date: 13.04.2010 Author: Valentin Category: webapps/0day Version: XSS security fix from 31.12.2009, 1.02 and before Tested on: Debian Lenny, MySQL 5 CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1...

CVE-2009-4736

Cross-site scripting XSS vulnerability in search.php in CommonSense CMS 5.0 allows remote attackers to inject arbitrary web script or HTML via the q parameter...

CVE-2010-1072

Cross-site scripting XSS vulnerability in search.php in Sniggabo CMS 2.21 allows remote attackers to inject arbitrary web script or HTML via the q parameter...

CVE-2009-4736: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in search.php in CommonSense CMS 5.0 allows remote attackers to inject arbitrary web script or HTML via the q parameter...

CVE-2010-1072: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in search.php in Sniggabo CMS 2.21 allows remote attackers to inject arbitrary web script or HTML via the q parameter...

CVE-2010-0699: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in VideoSearchScript Pro 3.5 allows remote attackers to inject arbitrary web script or HTML via the q parameter...

Dan Geer, In-Q-Tel

Anyone who has ever had a single conversation with Dan, or even seen him speak, will understand immediately why he’s on this list. Dan’s as smart as they come he has a Ph.D. in biostatistics! and his widely varied background gives him a truly unique perspective on security issues. His talks and...

CVE-2009-4575

Cross-site scripting XSS vulnerability in the Q-Personel comqpersonel component 1.0.2 RC2 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the personelsira parameter in a sirala action to index.php...

Cross site scripting

Cross-site scripting XSS vulnerability in the Q-Personel comqpersonel component 1.0.2 RC2 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the personelsira parameter in a sirala action to index.php...

CVE-2009-4575

Cross-site scripting XSS vulnerability in the Q-Personel comqpersonel component 1.0.2 RC2 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the personelsira parameter in a sirala action to index.php...

CVE-2009-4575: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Q-Personel comqpersonel component 1.0.2 RC2 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the personelsira parameter in a sirala action to index.php...

Sql injection

SQL injection vulnerability in the Q-Proje Siirler Bileseni comsiirler component 1.2 RC for Joomla! allows remote attackers to execute arbitrary SQL commands via the sid parameter in an sdetay action to index.php...

CVE-2009-3972

CVE-2009-3972 describes an SQL injection in the Q-Proje Siirler Bileseni (com_siirler) component for Joomla! version 1.2 RC, allowing remote attackers to inject arbitrary SQL via the sid parameter in the sdetay action of index.php. Affected software: com_siirler 1.2 RC on Joomla!. Root cause: imp...