CVE-2010-5041: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in the NPGallery plugin 0.94 for Nucleus allows remote attackers to execute arbitrary SQL commands via the id parameter in a plugin action...

CVE-2010-4997: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in OlyKit Swoopo Clone 2010 allows remote attackers to execute arbitrary SQL commands via the id parameter in a product action...

CVE-2010-5032: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the BF Quiz combfquiztrial component before 1.3.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a bfquiztrial action to index.php...

CVE-2010-5030: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in Ecomat CMS 5.0 allows remote attackers to inject arbitrary web script or HTML via the lang parameter in a web action...

CVE-2010-5031: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in fileNice 1.1 allows remote attackers to inject arbitrary web script or HTML via the sstring parameter aka the Search Box. NOTE: some of these details are obtained from third party information...

CVE-2010-4971: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in VideoWhisper PHP 2 Way Video Chat component for Joomla! allows remote attackers to inject arbitrary web script or HTML via the r parameter to index.php...

PT-2011-1977

Name of the Vulnerable Software and Affected Versions DJ-ArtGallery com djartgallery version 0.9.1 for Joomla! Description The issue allows remote attackers to inject arbitrary web script or HTML via the cid parameter in an editItem action to "administrator/index.php". This is a cross-site...

PT-2011-1979

Name of the Vulnerable Software and Affected Versions Joomla! component com searchlog version 3.1.0 Description The issue allows remote authenticated users with Public Back-end privileges to execute arbitrary SQL commands. This is achieved by exploiting the search parameter in a log action to the...

PT-2011-1963

Name of the Vulnerable Software and Affected Versions JExtensions JE Job com jejob component version 1.0 for Joomla! Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the catid parameter in an item action to "index.php". Recommendation...

PT-2011-1932

Name of the Vulnerable Software and Affected Versions OlyKit Swoopo Clone 2010 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the id parameter in a product action within the index.php file. Recommendations For OlyKit Swoopo Clone...

CVE-2010-5009: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in UTStats Beta 4 and earlier allows remote attackers to execute arbitrary SQL commands via the pid parameter in a matchp action...

PT-2011-1944

Name of the Vulnerable Software and Affected Versions UTStats versions Beta 4 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the pid parameter in a "matchp" action in the index.php file. Recommendations For versions Beta 4 and...

CVE-2010-4972

SQL injection vulnerability in index.php in YPNinc JokeScript allows remote attackers to execute arbitrary SQL commands via the ypncatid parameter...

CVE-2010-4968

SQL injection vulnerability in the webmaster-tips.net Flash Gallery comwmtpic component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter to index.php...

Sql injection

SQL injection vulnerability in the Techjoomla SocialAds For JomSocial comsocialads component for Joomla! allows remote attackers to execute arbitrary SQL commands via the ads description field in a showad action to index.php...

Sql injection

SQL injection vulnerability in index.php in esoftpro Online Photo Pro 2.0 allows remote attackers to execute arbitrary SQL commands via the section parameter...

Sql injection

SQL injection vulnerability in the NeoRecruit comneorecruit component 1.6.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter in an offerview action to index.php, a different vector than CVE-2007-4506...

CVE-2010-4999

CVE-2010-4999 corresponds to an SQL injection vulnerability in esoftpro Online Photo Pro 2.0, exploitable via the section parameter in index.php. The connected documents confirm the affected component and describe the vulnerability as enabling remote SQL command execution, but do not provide tech...

PT-2011-1928

Name of the Vulnerable Software and Affected Versions Joomla! component eventcal com eventcal version 1.6.4 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the Itemid parameter in the "index.php" endpoint. Recommendations For version...

PT-2011-1930

Name of the Vulnerable Software and Affected Versions Joomla! component NeoRecruit com neorecruit version 1.6.4 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the Itemid parameter in an offer view action to "index.php"...