8 matches found
CVE-2018-5990
SQL Injection exists in the AllVideos Reloaded 1.2.x component for Joomla! via the divid parameter...
Sql injection
SQL Injection exists in the AllVideos Reloaded 1.2.x component for Joomla! via the divid parameter...
CVE-2018-5990
SQL Injection exists in the AllVideos Reloaded 1.2.x component for Joomla! via the divid parameter...
CVE-2018-5990
SQL Injection exists in the AllVideos Reloaded 1.2.x component for Joomla! via the divid parameter...
CVE-2018-5990: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection exists in the AllVideos Reloaded 1.2.x component for Joomla! via the divid parameter...
PT-2018-17276
Name of the Vulnerable Software and Affected Versions: AllVideos Reloaded versions 1.2.x Description: The issue exists due to SQL Injection in the AllVideos Reloaded component for Joomla!, specifically via the divid parameter. Recommendations: For AllVideos Reloaded versions 1.2.x, avoid using th...
PT-2015-5257
Name of the Vulnerable Software and Affected Versions Banner Effect Header plugin versions prior to 1.2.8 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the banner effect divid parameter in the BannerEffectOptions page to...
CVE-2008-7085: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in TheHockeyStop HockeySTATS Online 2.0 Basic and Advanced allow remote attackers to execute arbitrary SQL commands via the 1 id parameter in the viewpage action to the default URI, probably index.php, or 2 divid parameter in the schedule action to index.php...