CVE-2011-4829: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the comlisting component in Barter Sites component 1.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the categoryid parameter to index.php...

PT-2011-5127

Name of the Vulnerable Software and Affected Versions AutoSec Tools V-CMS version 1.0 Description The issue allows remote attackers to inject arbitrary web script or HTML, which can be achieved via two parameters: the p parameter to "redirect.php" and the box parameter to...

PT-2011-5129

Name of the Vulnerable Software and Affected Versions Joomla! Barter Sites component version 1.3 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the category id parameter in the index.php API endpoint. Recommendations For Joomla!...

PT-2011-5123

Name of the Vulnerable Software and Affected Versions com vikrealestate version 1.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the contract parameter in a results action and the imm parameter in a show action to "index.php"...

PT-2011-5133

Name of the Vulnerable Software and Affected Versions SugarCRM versions 6.1 through 6.1.6 SugarCRM versions 6.2 through 6.2.3 SugarCRM versions 6.3 through 6.3.0RC2 SugarCRM versions 6.4 through 6.4.0beta0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is...

PT-2011-5115

Name of the Vulnerable Software and Affected Versions Joomla! component com hmcommunity version prior to 1.01 Description The issue allows remote attackers to inject arbitrary web script or HTML via multiple parameters in a save task for a profile to "index.php". The vulnerable parameters include...

CVE-2011-4802: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Dolibarr 3.1.0 RC and probably earlier allow remote authenticated users to execute arbitrary SQL commands via the 1 sortfield, 2 sortorder, and 3 sall parameters to user/index.php and b user/group/index.php; the id parameter to 4 info.php, 5 perms.php, 6...

CVE-2011-4809: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the HM Community comhmcommunity component before 1.01 for Joomla! allow remote attackers to inject arbitrary web script or HTML via the 1 language, 2 university, 3 persent, 4 companyname, 5 designation, 6 music, 7 books, 8 movies, 9 games, 10...

CVE-2011-4814

Multiple cross-site scripting XSS vulnerabilities in Dolibarr 3.1.0 RC and probably earlier allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 index.php, 2 admin/boxes.php, 3 comm/clients.php, 4 commande/index.php; and the optioncss parameter to 5 admin/ihm.php an...

PT-2011-5114

Name of the Vulnerable Software and Affected Versions Joomla! component com hmcommunity version prior to 1.01 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the id parameter in a 'fnd home' action to 'index.php'. Recommendations For...

Family CMS 2.7.2 - Multiple Persistent Cross-Site Scripting Vulnerabilities

FCMS2.7.2 cms and earlier multiple stored XSS Vulnerability =================================================================================== Exploit Title: FCMS2.7.2 cms multiple stored XSS Vulnerability Download link...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Hotaru.php in the Search plugin 1.3 for Hotaru CMS allow remote attackers to inject arbitrary web script or HTML via the 1 SITENAME parameter to adminindex.php, or the 2 return and 3 search parameters to index.php. NOTE: some of these details a...

Joomla component com_qcontacts 1.0.6 SQL injection

Exploit for php platform in category web applications Exploit Title: QContacts 1.0.6 Joomla component SQL injection Google Dork: inurl:"/components/comqcontacts/" Date: Decembar/08/2011 Author: Don BalcanCrew & BalcanHack Software Link: http://www.latenight-coding.com/joomla-addons/qcontacts.html...

Joomla! Component com_qcontacts 1.0.6 - SQL Injection

Exploit Title: QContacts 1.0.6 Joomla component SQL injection Google Dork: inurl:"/components/comqcontacts/" Date: Decembar/08/2011 Author: Don BalcanCrew & BalcanHack Software Link: http://www.latenight-coding.com/joomla-addons/qcontacts.html Version: 1.0.6 Tested on: Apache Vulnerability: This...

PT-2011-5016

Name of the Vulnerable Software and Affected Versions WordPress Users plugin version 1.3 and possibly earlier Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the uid parameter to the "index.php" endpoint. Recommendations For WordPress Users...

CVE-2011-4541

Cross-site scripting XSS vulnerability in index.php in Hastymail2 2.1.1 before RC2 allows remote attackers to inject arbitrary web script or HTML via the rs parameter in a mailbox Drafts action...

CVE-2011-4541

The CVE-2011-4541 entry concerns Hastymail2 (version 2.1.1 prior to RC2) and is caused by a cross-site scripting (XSS) vulnerability in index.php where an attacker can inject script/HTML via the rs parameter in the mailbox Drafts action. Public references in NVD and CVE listings confirm the impac...

PT-2011-4998

Name of the Vulnerable Software and Affected Versions Joomla! component Time Returns com timereturns versions 2.0 and possibly earlier Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the id parameter in a timereturns action to...

CVE-2011-4567: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in includes/templates/templatedefault/templates/tplgvsenddefault.php in Zen Cart before 1.5 allows remote attackers to inject arbitrary web script or HTML via the message parameter in a gvsend action to index.php, a different vulnerability than CVE-2011-4547...

CVE-2011-4570: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Time Returns comtimereturns component 2.0 and possibly earlier versions for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a timereturns action to index.php...