CVE-2009-3945

Unspecified vulnerability in the Front-End Editor in the comcontent component in Joomla! before 1.5.15 allows remote authenticated users, with Author privileges, to replace the articles of an arbitrary user via unknown vectors...

CVE-2009-3945

Unspecified vulnerability in the Front-End Editor in the comcontent component in Joomla! before 1.5.15 allows remote authenticated users, with Author privileges, to replace the articles of an arbitrary user via unknown vectors...

CVE-2009-3945

The CVE-2009-3945 entry concerns Joomla! prior to 1.5.15, specifically the Front-End Editor in the com_content component. The vulnerability allows remote authenticated users with Author privileges to replace the articles of an arbitrary user via unknown vectors. The available documents confirm th...

CVE-2009-3945: Undefined Security Weakness

Unspecified vulnerability in the Front-End Editor in the comcontent component in Joomla! before 1.5.15 allows remote authenticated users, with Author privileges, to replace the articles of an arbitrary user via unknown vectors...

Sql injection

SQL injection vulnerability in the content component comcontent 1.0.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter in a blogcategory action to index.php...

CVE-2008-6923

CVE-2008-6923 describes an SQL injection in Joomla! (com_content 1.0.0) where the Itemid parameter in a blogcategory action to index.php allows remote attackers to execute arbitrary SQL commands. The vulnerability affects the content component and can lead to data exposure or modification as impl...

CVE-2008-6923

SQL injection vulnerability in the content component comcontent 1.0.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter in a blogcategory action to index.php...

CVE-2008-6923: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the content component comcontent 1.0.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter in a blogcategory action to index.php...

CVE-2009-1279

Multiple cross-site scripting XSS vulnerabilities in Joomla! 1.5 through 1.5.9 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to the 1 comadmin component, 2 comsearch component when "Gather Search Statistics" is enabled, and 3 the category view in the...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Joomla! 1.5 through 1.5.9 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to the 1 comadmin component, 2 comsearch component when "Gather Search Statistics" is enabled, and 3 the category view in the...

CVE-2009-1279: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Joomla! 1.5 through 1.5.9 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to the 1 comadmin component, 2 comsearch component when "Gather Search Statistics" is enabled, and 3 the category view in the...

[20090302] - Core - com_content XSS

A XSS vulnerability exists in the category view of comcontent...

CVE-2008-6299

Multiple cross-site scripting XSS vulnerabilities in Joomla! 1.5.7 and earlier allow remote authenticated users with certain privileges to inject arbitrary web script or HTML via 1 the title and description parameters to the comweblinks module and 2 unspecified vectors in the comcontent module...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Joomla! 1.5.7 and earlier allow remote authenticated users with certain privileges to inject arbitrary web script or HTML via 1 the title and description parameters to the comweblinks module and 2 unspecified vectors in the comcontent module...

CVE-2008-6299

Multiple cross-site scripting XSS vulnerabilities in Joomla! 1.5.7 and earlier allow remote authenticated users with certain privileges to inject arbitrary web script or HTML via 1 the title and description parameters to the comweblinks module and 2 unspecified vectors in the comcontent module...

CVE-2008-6299: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Joomla! 1.5.7 and earlier allow remote authenticated users with certain privileges to inject arbitrary web script or HTML via 1 the title and description parameters to the comweblinks module and 2 unspecified vectors in the comcontent module...

[20081101] - Core - com_content XSS vulnerability

The defaults on comcontent article submission allow entry of dangerous HTML tags script, etc. This only affects users with access level Author or higher, and only if you have not set filtering options in comcontent configuration...

Sql injection

Multiple SQL injection vulnerabilities in the comcontent component in MiaCMS 4.6.5 allow remote attackers to execute arbitrary SQL commands via the id parameter in a 1 view, 2 category, or 3 blogsection action to index.php...

CVE-2008-3785: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in the comcontent component in MiaCMS 4.6.5 allow remote attackers to execute arbitrary SQL commands via the id parameter in a 1 view, 2 category, or 3 blogsection action to index.php...

joomlacontent-sql.txt

------------------------------------------------------------------------------------------- Joomla Component comcontent SQL Injection Vulnerabity ------------------------------------------------------------------------------------------- Author : unknownstyler Dork : inurl:comcontent POC :...