49 matches found
CVE-2009-2099: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the iJoomla RSS Feeder comijoomlarss component for Joomla! allows remote attackers to execute arbitrary SQL commands via the cat parameter in an xml action to index.php...
Joomla iJoomla RSS Blind SQL Injection
!/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print " \n"; print " ooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooo\n"; print " o Joomla Component comijoomlarss Blind SQL Injection Exploit o\n"; print " o Author:xoron o\n"; print " o More...
Joomla iJoomla Archive SQL Injection
1 $url = $argv1; if $argc 3 $userid = 1; else $userid = $argv2; $r = strlenfilegetcontents$url."/index.php?option=comijoomlaarchive&task=archive&searcharchive=1&act=search&catid=".$userid."+and+1=1"; echo "\nExploiting:\n"; $w =...
Sql injection
SQL injection vulnerability in the iJoomla News Portal comnewsportal component 1.0 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter to index.php...
CVE-2008-2676
The vulnerability CVE-2008-2676 is a SQL injection in the iJoomla News Portal (com_news_portal) component for Joomla! versions 1.0 and earlier. The flaw allows remote attackers to inject arbitrary SQL via the Itemid parameter to index.php. Affects Joomla! installations using the affected componen...
CVE-2008-2676
SQL injection vulnerability in the iJoomla News Portal comnewsportal component 1.0 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter to index.php...
CVE-2008-2676: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the iJoomla News Portal comnewsportal component 1.0 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter to index.php...
Joomla! Component iJoomla News Portal 1.0 - itemID SQL Injection
Joomla! Component iJoomla News Portal 1.0 - itemID SQL Injection !/usr/bin/perl Script Name: Joomla Component News Portal : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit; $target =...
Joomla! Component iJoomla! com_magazine - 'pageid' SQL Injection
source: https://www.securityfocus.com/bid/27888/info iJoomla 'commagazine' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application...