Calendarix 0.8.20071118 - SQL Injection

Informatique inside Calendarix : SQL injection Version : 0.8.20071118 et infrieur Author : Thibow Contact : Thibow4tlinformatique-insidedotcom Location : France Website : http://www.informatique-inside.com Dork : "inurl:calday.php?op=day&catview=" Solution : Update: http://www.calendarix.com/ . :...

Sql injection

SQL injection vulnerability in index.php in the Atapin Jokes comjokes 1.0 component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the cat parameter in a CatView action...

CVE-2008-0519

SQL injection vulnerability in index.php in the Atapin Jokes comjokes 1.0 component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the cat parameter in a CatView action...

CVE-2008-0519

The CVE-2008-0519 entry describes a SQL injection vulnerability in index.php of the Atapin Jokes (com_jokes) 1.0 component used with Mambo and Joomla!. The issue is triggered via the cat parameter in a CatView action, allowing remote attackers to execute arbitrary SQL commands. Documents confirm ...

Mambo Component jokes 1.0 - 'cat' SQL Injection

joomla SQL Injectioncomjokes AUTHOR : S@BUN HOME : http://www.hackturkiye.com/ DorKs 1 : allinurl: "comjokes" EXPLOIT : index.php?option=comjokes&Itemid=S@BUN&func=CatView&cat=-776655//union//select//0,1,2,3,username,5,password,7,8//from//mosusers/ S@BUN www.hackturkiye.com S@BUN S@BUN GOOD LUCKY...

Sql injection

Multiple SQL injection vulnerabilities in Calendarix allow remote attackers to execute arbitrary SQL commands via 1 the catview parameter in calfunctions.inc.php and 2 the login parameter in callogin.php. NOTE: the catview vector might overlap CVE-2005-1865...

CVE-2005-1865

Multiple SQL injection vulnerabilities in Calendarix Advanced 1.5 allow remote attackers to execute arbitrary SQL commands via the catview parameter to 1 calweek.php, 2 calcat.php, or 3 calday.php, or 4 id parameter to calpophols.php...

CVE-2004-2007

Cross-site scripting XSS vulnerability in modules.php in NukeJokes 1.7 and 2 Beta allows remote attackers to inject arbitrary HTML or web script via the 1 cat parameter in a CatView function or 2 jokeid parameter in a JokeView function...

CVE-2004-2007

Cross-site scripting XSS vulnerability in modules.php in NukeJokes 1.7 and 2 Beta allows remote attackers to inject arbitrary HTML or web script via the 1 cat parameter in a CatView function or 2 jokeid parameter in a JokeView function...