CVE-2010-4638: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the submitSurvey function in controller.php in JQuarks4s comjquarks4s component 1.0.0 for Joomla!, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the q parameter in a submitSurvey action to index.php...

Joomla! Component Q-Personel 1.0 - SQL Injection

Joomla! Component Q-Personel 1.0 - SQL Injection !/usr/bin/python Joomla comqpersonel SQL Injection Remote Exploit Version 1.0 23th May 2010 public release By Valentin Hoebel [email protected] ASCII FOR BREAKFAST EXPLOIT BASED ON MY COLUMN FUZZER Fuzzer was enhanced so it serves as a Joomla...

Joomla! Component Q-Personel 1.0 - SQL Injection

!/usr/bin/python Joomla comqpersonel SQL Injection Remote Exploit Version 1.0 23th May 2010 public release By Valentin Hoebel [email protected] ASCII FOR BREAKFAST EXPLOIT BASED ON MY COLUMN FUZZER Fuzzer was enhanced so it serves as a Joomla Exploiter template About the Vulnerability:...

CVE-2010-1994

SQL injection vulnerability in index.php in TomatoCMS before 2.0.5 allows remote attackers to execute arbitrary SQL commands via the q parameter in conjunction with a /news/search PATHINFO...

CVE-2010-1994: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in TomatoCMS before 2.0.5 allows remote attackers to execute arbitrary SQL commands via the q parameter in conjunction with a /news/search PATHINFO...

CVE-2010-1720

SQL injection vulnerability in the Q-Personel comqpersonel component 1.0.2 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the katid parameter in a qpListele action to index.php...

Sql injection

SQL injection vulnerability in the Q-Personel comqpersonel component 1.0.2 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the katid parameter in a qpListele action to index.php...

CVE-2010-1720

SQL injection vulnerability in the Q-Personel comqpersonel component 1.0.2 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the katid parameter in a qpListele action to index.php...

CVE-2010-1720

CVE-2010-1720 describes a SQL injection vulnerability in Joomla! component Q-Personel (com_qpersonel) 1.0.2 and earlier. The flaw allows remote attackers to execute arbitrary SQL commands via the katid parameter in a qpListele action to index.php. Documents confirm affected software and root caus...

CVE-2010-1720: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Q-Personel comqpersonel component 1.0.2 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the katid parameter in a qpListele action to index.php...

Flex File Manager Shell Upload Vulnerability

Exploit for php platform in category web applications ============================================ Flex File Manager Shell Upload Vulnerability ============================================ Flex File Manager Shell Upload Vulnerability Author: Mr.MLL Published: 2010-04-19 Verified: yes Download...

Joomla QPersonal SQL Injection

Exploit Title: Joomla Component QPersonel SQL Injection Vulnerability Date: 13.04.2010 Author: Valentin Category: webapps/0day Version: XSS security fix from 31.12.2009, 1.02 and before Tested on: CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: |::...

Joomla Component QPersonel SQL Injection Vulnerability

No description provided by source. Exploit Title: Joomla Component QPersonel SQL Injection Vulnerability Date: 13.04.2010 Author: Valentin Category: webapps/0day Version: XSS security fix from 31.12.2009, 1.02 and before Tested on: Debian Lenny, MySQL 5 CVE : Code :...

Joomla! Component QPersonel 1.0.2 - SQL Injection

Joomla! Component QPersonel 1.0.2 - SQL Injection Exploit Title: Joomla Component QPersonel SQL Injection Vulnerability Date: 13.04.2010 Author: Valentin Category: webapps/0day Version: XSS security fix from 31.12.2009, 1.02 and before Tested on: Debian Lenny, MySQL 5 CVE : Code :...

Joomla! Component QPersonel 1.0.2 - SQL Injection

Exploit Title: Joomla Component QPersonel SQL Injection Vulnerability Date: 13.04.2010 Author: Valentin Category: webapps/0day Version: XSS security fix from 31.12.2009, 1.02 and before Tested on: Debian Lenny, MySQL 5 CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1...

CVE-2009-4736

Cross-site scripting XSS vulnerability in search.php in CommonSense CMS 5.0 allows remote attackers to inject arbitrary web script or HTML via the q parameter...

CVE-2010-1072

Cross-site scripting XSS vulnerability in search.php in Sniggabo CMS 2.21 allows remote attackers to inject arbitrary web script or HTML via the q parameter...

CVE-2009-4736: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in search.php in CommonSense CMS 5.0 allows remote attackers to inject arbitrary web script or HTML via the q parameter...

CVE-2010-1072: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in search.php in Sniggabo CMS 2.21 allows remote attackers to inject arbitrary web script or HTML via the q parameter...

CVE-2010-0699: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in VideoSearchScript Pro 3.5 allows remote attackers to inject arbitrary web script or HTML via the q parameter...