13398 matches found
PT-2011-1833
Name of the Vulnerable Software and Affected Versions Joomla! Gantry com gantry component version 3.0.10 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the moduleid parameter to the "index.php" endpoint. Recommendations For version 3.0.10,...
PT-2011-1838
Name of the Vulnerable Software and Affected Versions CubeCart version 4.3.3 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the searchStr parameter in the "index.php" file. Recommendations For CubeCart version 4.3.3, update to a newer version...
PT-2011-1837
Name of the Vulnerable Software and Affected Versions Joomla! component Clantools com clantools version 1.2.3 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the squad or showgame parameter to the "index.php" endpoint. Recommendations For...
CVE-2010-4903: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in CubeCart 4.3.3 allows remote attackers to execute arbitrary SQL commands via the searchStr parameter...
CVE-2010-4904: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the Aardvertiser comaardvertiser component 2.1 and 2.1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catname parameter in a view action to index.php. NOTE: some of these details are obtained from third party information...
CVE-2010-4902: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in the Clantools comclantools component 1.2.3 for Joomla! allow remote attackers to execute arbitrary SQL commands via the 1 squad or 2 showgame parameter to index.php...
CVE-2010-4898: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the Gantry comgantry component 3.0.10 for Joomla! allows remote attackers to execute arbitrary SQL commands via the moduleid parameter to index.php...
CVE-2010-4870
SQL injection vulnerability in index.php in BloofoxCMS 0.3.5 allows remote attackers to execute arbitrary SQL commands via the gender parameter...
CVE-2010-4870
BloofoxCMS 0.3.5 is vulnerable to an SQL injection in index.php via the gender parameter, allowing remote attackers to execute arbitrary SQL commands. This CVE (CVE-2010-4870) is backed by multiple sources (NVD entry and OpenVAS/PRION listings) that confirm the flaw and impact (high severity, CVS...
PT-2011-1818
Name of the Vulnerable Software and Affected Versions MODx Revolution version 2.0.2-pl Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the modhash parameter in the "manager/index.php" endpoint. Recommendations For MODx Revolution...
PT-2011-1812
Name of the Vulnerable Software and Affected Versions OneCMS version 2.6.1 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the view parameter in the "index.php" file. Recommendations For OneCMS version 2.6.1, avoid using th...
PT-2011-1805
Name of the Vulnerable Software and Affected Versions BloofoxCMS version 0.3.5 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the gender parameter in the "index.php" endpoint. Recommendations For BloofoxCMS version 0.3.5, consider restricting...
CVE-2010-4883: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in manager/index.php in MODx Revolution 2.0.2-pl allows remote attackers to inject arbitrary web script or HTML via the modhash parameter...
CVE-2010-4870: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in BloofoxCMS 0.3.5 allows remote attackers to execute arbitrary SQL commands via the gender parameter...
CVE-2010-4877: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in index.php in OneCMS 2.6.1 allows remote attackers to inject arbitrary web script or HTML via the view parameter...
CVE-2010-4869
SQL injection vulnerability in index.php in DBHcms 1.1.4 allows remote attackers to execute arbitrary SQL commands via the editmenu parameter...
CVE-2010-4862
SQL injection vulnerability in the JExtensions JE Directory comjedirectory component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in an item action to index.php...
CVE-2010-4859
SQL injection vulnerability in index.php in WebAsyst Shop-Script allows remote attackers to execute arbitrary SQL commands via the blogid parameter in a news action...
