CubeCart SQL Injection Vulnerability (CNVD-2016-01942)

CubeCart is an open source PHP e-commerce software system. CubeCart suffers from a SQL injection vulnerability. Due to insufficient filtering of user-supplied data via the "char" HTTP GET parameter passed to the "/admin.php" PHP script input, a remotely authenticated attacker with privileged acce...

CVE-2010-4517: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the JExtensions JE Auto comjeauto component 1.0 for Joomla!, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the char parameter in an item action to index.php...

PT-2010-5520

Name of the Vulnerable Software and Affected Versions JExtensions JE Auto com jeauto component version 1.0 for Joomla! Description The issue allows remote attackers to execute arbitrary SQL commands when magic quotes gpc is disabled. This is achieved by exploiting the char parameter in an item...