CVE-2007-4189

Multiple cross-site scripting XSS vulnerabilities in Joomla! before 1.0.13 aka Sunglow allow remote attackers to inject arbitrary web script or HTML via unspecified vectors in the 1 comsearch, 2 comcontent, and 3 modlogin components. NOTE: some of these details are obtained from third party...

Joomla! com_content Component 'order' Parameter XSS

The version of Joomla! running on the remote host is affected by a cross-site scripting XSS vulnerability in comcontent/content.php due to improper sanitization of user-supplied input to the 'order' parameter before using it to generate dynamic HTML content. An unauthenticated, remote attacker ca...

CVE-2006-4473

Unspecified vulnerability in comcontent in Joomla! before 1.0.11, when $mosConfighideEmail is set, allows attackers to perform the emailform and emailsend tasks...

CVE-2006-4473

CVE-2006-4473 affects Joomla!

CVE-2006-4473

Unspecified vulnerability in comcontent in Joomla! before 1.0.11, when $mosConfighideEmail is set, allows attackers to perform the emailform and emailsend tasks...

CVE-2006-4472

Multiple unspecified vulnerabilities in Joomla! before 1.0.11 allow attackers to bypass user authentication via unknown vectors involving the 1 dopdf command and the 2 emailform comcontent task...

CVE-2006-1794

SQL injection vulnerability in Mambo 4.5.3, 4.5.3h, and possibly earlier versions allows remote attackers to execute arbitrary SQL commands via 1 the $username variable in the mosGetParam function and 2 the $task parameter in the mosMenuCheck function in a includes/mambo.php; and 3 the $filter...

Sql injection

SQL injection vulnerability in Mambo 4.5.3, 4.5.3h, and possibly earlier versions allows remote attackers to execute arbitrary SQL commands via 1 the $username variable in the mosGetParam function and 2 the $task parameter in the mosMenuCheck function in a includes/mambo.php; and 3 the $filter...