CVE-2018-16632

Mezzanine CMS v4.3.1 is affected by CVE-2018-16632. The vulnerability is a Cross Site Scripting (XSS) flaw triggered via the title parameter in the admin/blog/blogcategory/add/ flow, specifically through the URL /admin/blog/blogcategory/add/?_to_field=id&_popup=1 on the related admin/blog/blogpos...

PT-2018-13659

Name of the Vulnerable Software and Affected Versions Mezzanine CMS version 4.3.1 Description The issue allows for XSS via the "title" parameter at the "/admin/blog/blogcategory/add/? to field=id& popup=1" endpoint, which is accessible at "admin/blog/blogpost/add/". Recommendations For Mezzanine...

Sql injection

SQL injection vulnerability in the content component comcontent 1.0.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter in a blogcategory action to index.php...

CVE-2008-6923: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the content component comcontent 1.0.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter in a blogcategory action to index.php...