PT-2011-1875

Name of the Vulnerable Software and Affected Versions WAnewsletter version 2.1.2 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in the "index.php" file. Recommendations For WAnewsletter version 2.1.2, consider restricting...

PT-2011-1861

Name of the Vulnerable Software and Affected Versions Joomla! TimeTrack component version 1.2.4 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the ct id parameter in a timetrack action to the "index.php" endpoint. Recommendations Fo...

PT-2011-1864

Name of the Vulnerable Software and Affected Versions Joomla! component com ezautos affected versions not specified Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. The issue is exploited via the firstCode parameter in a helpers action to "index.php"...

PT-2011-1874

Name of the Vulnerable Software and Affected Versions MailForm version 1.2 Description The issue allows remote attackers to execute arbitrary PHP code via a URL in the theme parameter in the index.php file. Recommendations For MailForm version 1.2, consider restricting access to the index.php fil...

PT-2011-1879

Name of the Vulnerable Software and Affected Versions Mambo and Joomla! affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the id parameter in a showExpertProfileDetailed action to index.php...

PT-2011-1880

Name of the Vulnerable Software and Affected Versions Joomla! component com camelcitydb2 version 2.2 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the id parameter in the "index.php" endpoint. Recommendations For version 2.2 of the...

CVE-2010-4926: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the TimeTrack comtimetrack component 1.2.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the ctid parameter in a timetrack action to index.php...

CVE-2010-4937: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in the Amblog comamblog component 1.0 for Joomla! allow remote attackers to execute arbitrary SQL commands via the 1 articleid or 2 catid parameter to index.php...

CVE-2010-4927: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Restaurant Guide comrestaurantguide component 1.0.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a country action to index.php...

CVE-2010-4930: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in @mail Webmail before 6.2.0 allows remote attackers to inject arbitrary web script or HTML via the MailType parameter in a mail/auth/processlogin action...

CVE-2010-4929: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Joostina comezautos component for Joomla! allows remote attackers to execute arbitrary SQL commands via the firstCode parameter in a helpers action to index.php...

CVE-2010-4939: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in index.php in MailForm 1.2 allows remote attackers to execute arbitrary PHP code via a URL in the theme parameter...

CVE-2010-4940: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in WAnewsletter 2.1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-4936: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Slide Show comslideshow component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php...

CVE-2010-4945: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the CamelcityDB comcamelcitydb2 component 2.2 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php...

PT-2011-1872

Name of the Vulnerable Software and Affected Versions com amblog version 1.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the articleid or catid parameter to the "index.php" endpoint. Recommendations For version 1.0, consider restrictin...

CVE-2010-4941: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Teams comteams component 110281008091711 for Joomla! allows remote attackers to execute arbitrary SQL commands via the PlayerID parameter in a player save action to index.php...

CVE-2010-4958: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Prado Portal 1.2.0 allows remote attackers to execute arbitrary SQL commands via the page parameter...

PT-2011-1873

Name of the Vulnerable Software and Affected Versions Joomla! affected versions not specified Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the Itemid parameter in a categories action to index.php in the Weblinks com...

CVE-2010-4903

CVE-2010-4903 : CubeCart 4.3.3 contains a vulnerability in index.php where the searchStr parameter enables an SQL injection, allowing remote attackers to execute arbitrary SQL commands. The NVD entry lists a base score of 7.5 (HIGH) with network attack vector and low complexity, no authentication...