CVE-2010-0461: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the casino comcasino component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a 1 category or 2 player action to index.php...

CVE-2010-0459: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Mochigames commochigames component 0.51 and possibly other versions for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php...

CVE-2010-0373

SQL injection vulnerability in the libros comlibros component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action to index.php...

CVE-2010-0373: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the libros comlibros component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action to index.php...

CVE-2009-4628: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the TemplatePlaza.com TPDugg comtpdugg component 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a tags action to index.php...

CVE-2009-4621: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the JiangHu Inn plugin 1.1 and earlier for Discuz! allows remote attackers to execute arbitrary SQL commands via the id parameter in a show action to forummission.php...

CVE-2009-4620: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Joomloc comjoomloc component 1.0 for Joomla allows remote attackers to execute arbitrary SQL commands via the id parameter in an edit task to index.php...

CVE-2010-0319: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in Docmint 1.0 and 2.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: some of these details are obtained from third party information...

CVE-2009-4598: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the JPhoto comjphoto component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a category action to index.php...

PT-2010-1972 · Joomlabamboo +1 · Joomlabamboo Simpla Admin Template +1

Name of the Vulnerable Software and Affected Versions: JoomlaBamboo JB Simpla Admin template for Joomla affected versions not specified Description: A SQL injection issue allows remote attackers to execute arbitrary SQL commands via the id parameter in an article action to the com content...

CVE-2009-4580: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Hasta Blog 2.3 allow remote attackers to inject arbitrary web script or HTML via the id parameter to 1 yorumyaz.php and 2 blog.php...

CVE-2010-0158: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the JoomlaBamboo JB Simpla Admin template for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in an article action to the comcontent component, reachable through index.php. NOTE: the vendor disputes this report, saying:...

CVE-2009-4583: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the DhForum comdhforum component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a grouplist action to index.php...

CVE-2009-4582: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in detail.php in the Dictionary module for XOOPS 2.0.18 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-4569

SQL injection vulnerability in elkagroup Image Gallery allows remote attackers to execute arbitrary SQL commands via the id parameter to the default URI under news/...

CVE-2009-4569

SQL injection vulnerability in elkagroup Image Gallery allows remote attackers to execute arbitrary SQL commands via the id parameter to the default URI under news/...

CVE-2009-4569: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in elkagroup Image Gallery allows remote attackers to execute arbitrary SQL commands via the id parameter to the default URI under news/...

CVE-2009-4540: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in page.php in Mini CMS 1.0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-4456

SQL injection vulnerability in newsdetail.php in Green Desktiny 2.3.1, and possibly earlier versions, allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-4456: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in newsdetail.php in Green Desktiny 2.3.1, and possibly earlier versions, allows remote attackers to execute arbitrary SQL commands via the id parameter...