Sql injection

SQL injection vulnerability in the DJ-ArtGallery comdjartgallery component 0.9.1 for Joomla! allows remote authenticated users to execute arbitrary SQL commands via the cid parameter in an editItem action to administrator/index.php...

CVE-2010-4971

Cross-site scripting XSS vulnerability in VideoWhisper PHP 2 Way Video Chat component for Joomla! allows remote attackers to inject arbitrary web script or HTML via the r parameter to index.php...

Sql injection

SQL injection vulnerability in index.php in NetArt Media iBoutique 4.0 allows remote attackers to execute arbitrary SQL commands via the page parameter...

CVE-2010-5006

CVE-2010-5006 affects EMO Realty Manager, specifically the googlemap/index.php component. The issue is a SQL injection in the cat1 parameter that allows remote arbitrary SQL execution. This is documented by multiple connected sources (OpenVAS description and NVD entry). The provided documents do ...

CVE-2010-5031

Cross-site scripting XSS vulnerability in index.php in fileNice 1.1 allows remote attackers to inject arbitrary web script or HTML via the sstring parameter aka the Search Box. NOTE: some of these details are obtained from third party information...

CVE-2010-5031

CVE-2010-5031 is a cross-site scripting (XSS) vulnerability in fileNice 1.1, affecting index.php via the sstring parameter (Search Box). Concrete details found: the vulnerability is XSS with arbitrary script/HTML injection possible through sstring. Affected component is fileNice 1.1 (index.php). ...

PT-2011-1906

Name of the Vulnerable Software and Affected Versions VideoWhisper PHP 2 Way Video Chat component for Joomla affected versions not specified Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or...

PT-2011-1941

Name of the Vulnerable Software and Affected Versions EMO Realty Manager affected versions not specified Description A SQL injection issue exists, allowing remote attackers to execute arbitrary SQL commands. This is achieved via the cat1 parameter in the "googlemap/index.php" endpoint...

PT-2011-1957

Name of the Vulnerable Software and Affected Versions JExtensions JE Story Submit com jesubmit component version 1.4 for Joomla! Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the view parameter to the "index.php" API endpoint...

PT-2011-1955

Name of the Vulnerable Software and Affected Versions NetArt Media iBoutique version 4.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the page parameter in the index.php file. Recommendations For NetArt Media iBoutique version 4.0...

PT-2011-1964

Name of the Vulnerable Software and Affected Versions Ecomat CMS version 5.0 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the show parameter in a web action in the index.php file. Recommendations For Ecomat CMS version 5.0, upda...

PT-2011-1976

Name of the Vulnerable Software and Affected Versions NP Gallery plugin version 0.94 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the id parameter in a plugin action within the index.php file of the NP Gallery plugin...

PT-2011-1967

Name of the Vulnerable Software and Affected Versions Joomla! component com bfquiztrial versions prior to 1.3.1 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the catid parameter in a bfquiztrial action to "index.php". Recommendations For...

PT-2011-1978

Name of the Vulnerable Software and Affected Versions DJ-ArtGallery com djartgallery version 0.9.1 for Joomla! Description The issue allows remote authenticated users to execute arbitrary SQL commands. This is achieved by exploiting the cid parameter in an editItem action to...

CVE-2010-5022: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the JExtensions JE Story Submit comjesubmit component 1.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the view parameter to index.php...

CVE-2010-5028: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the JExtensions JE Job comjejob component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in an item action to index.php...

CVE-2010-5029: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Ecomat CMS 5.0 allows remote attackers to execute arbitrary SQL commands via the show parameter in a web action...

CVE-2010-5043: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the DJ-ArtGallery comdjartgallery component 0.9.1 for Joomla! allows remote authenticated users to execute arbitrary SQL commands via the cid parameter in an editItem action to administrator/index.php...

CVE-2010-5020: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in NetArt Media iBoutique 4.0 allows remote attackers to execute arbitrary SQL commands via the page parameter...

CVE-2010-5041: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in the NPGallery plugin 0.94 for Nucleus allows remote attackers to execute arbitrary SQL commands via the id parameter in a plugin action...