Joomla! Component Cookex Agency CKForms - Local File Inclusion

A directory traversal vulnerability in the Cookex Agency CKForms comckforms component 1.3.3 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1345 info: name: Joomla! Component Cookex Agency CKForms - Local File...

Sql injection

SQL injection vulnerability in the Cookex Agency CKForms comckforms component 1.3.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the fid parameter in a detail action to index.php...

CVE-2010-1344

SQL injection vulnerability in the Cookex Agency CKForms comckforms component 1.3.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the fid parameter in a detail action to index.php...

CVE-2010-1345

Directory traversal vulnerability in the Cookex Agency CKForms comckforms component 1.3.3 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php...

Directory traversal

Directory traversal vulnerability in the Cookex Agency CKForms comckforms component 1.3.3 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php...

CVE-2010-1344

CVE-2010-1344 describes an SQL injection in the Joomla! CKForms (com_ckforms) component for version 1.3.3, enabling remote attackers to execute arbitrary SQL commands via the fid parameter in the detail action to index.php. Affected product: CKForms for Joomla!; vulnerability root cause: unsafe h...

CVE-2010-1344

SQL injection vulnerability in the Cookex Agency CKForms comckforms component 1.3.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the fid parameter in a detail action to index.php...

CVE-2010-1345: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the Cookex Agency CKForms comckforms component 1.3.3 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php...

CVE-2010-1344: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Cookex Agency CKForms comckforms component 1.3.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the fid parameter in a detail action to index.php...