PT-2011-1907

Name of the Vulnerable Software and Affected Versions YPNinc JokeScript affected versions not specified Description A SQL injection issue exists, allowing remote attackers to execute arbitrary SQL commands. This is achieved by manipulating the ypncat id parameter in the index.php file...

PT-2011-1934

Name of the Vulnerable Software and Affected Versions esoftpro Online Photo Pro version 2.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the section parameter in the index.php file. Recommendations For esoftpro Online Photo Pro...

PT-2011-1912

Name of the Vulnerable Software and Affected Versions Canteen com canteen component version 1.0 for Joomla! Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the mealid parameter in the API endpoint "index.php" to execute SQL injection...

PT-2011-1925

Name of the Vulnerable Software and Affected Versions Joomla! component com addressbook affected versions not specified Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved by manipulating the Itemid parameter in a contact action to the...

PT-2011-1926

Name of the Vulnerable Software and Affected Versions Joomla! component com ninjamonials affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the Itemid parameter in a "display" action to "index.php"...

CVE-2010-4975: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Techjoomla SocialAds For JomSocial comsocialads component for Joomla! allows remote attackers to execute arbitrary SQL commands via the ads description field in a showad action to index.php...

CVE-2010-4968: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the webmaster-tips.net Flash Gallery comwmtpic component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter to index.php...

CVE-2010-4972: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in YPNinc JokeScript allows remote attackers to execute arbitrary SQL commands via the ypncatid parameter...

CVE-2010-4999: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in esoftpro Online Photo Pro 2.0 allows remote attackers to execute arbitrary SQL commands via the section parameter...

CVE-2010-4977: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in menu.php in the Canteen comcanteen component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the mealid parameter to index.php...

CVE-2010-4991: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the NinjaMonials comninjamonials component for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter in a display action to index.php...

CVE-2010-4993: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the eventcal comeventcal component 1.6.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter to index.php...

CVE-2010-5003: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the AutarTimonial comautartimonial component 1.0.8 for Joomla! allows remote attackers to execute arbitrary SQL commands via the limit parameter in an autartimonial action to index.php. NOTE: some of these details are obtained from third party information...

PT-2011-1938

Name of the Vulnerable Software and Affected Versions com autartimonial version 1.0.8 Description The issue allows remote attackers to execute arbitrary SQL commands via the limit parameter in an autartimonial action to "index.php". This enables attackers to manipulate the database by injecting...

CVE-2010-4990: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Front-edit Address Book comaddressbook component for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter in a contact action to index.php...

PT-2011-1910

Name of the Vulnerable Software and Affected Versions Joomla! component Techjoomla SocialAds For JomSocial com socialads affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands via the ads description field in a showad action to "index.php"...

CaupoShop Pro (2.x/ <= 3.70) Classic 3.01 Local File Include Vulnerability

Exploit for php platform in category web applications CaupoShop Pro 2.x/ = 3.70 Local File Include Vulnerability ----------------------------------------------------------------------------------------- Vuln Softwares : CaupoShop Pro 2.x CaupoShop Classic 3.01 CaupoShop Pro 3.70 Discovered By :...

PT-2011-1903

Name of the Vulnerable Software and Affected Versions com wmtpic version 1.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the Itemid parameter in the "/index.php" API endpoint. Recommendations For version 1.0, avoid using the Item...

Alsbtain Bulletin 1.5 / 1.6 Local File Inclusion

Title : Alsbtain Bulletin index.php Local File include Author : Null H4ck3r Product : Alsbtain Alsbtain Bulletin Vendor : http://www.alsbtain.net/ipb/ Date : 25/10/2011 Version : 1.5 , 1.6 Tested on : windows Dork : Powered By Alsbtain Bulletin 1.6 & Powered By Alsbtain Bulletin 1.5 Contact :...

Uiga Personal Portal Cross Site Scripting / Blind SQL Injection

Exploit Title: Uiga Personal Portal Multiple Vulnerability Date: 2011 Author: Eyup CELIK Version: All Version Tested on: All versions are Vulnerability Web Site: www.eyupcelik.com.tr ISSUE Blind SQL Injection and XSS can be done using the command input Vulnerable Page: index.php cart.php...