13398 matches found
CVE-2010-4866
SQL injection vulnerability in index.php in Chipmunk Board 1.3 allows remote attackers to execute arbitrary SQL commands via the forumID parameter...
CVE-2010-4866
CVE-2010-4866 describes a SQL injection vulnerability in Chipmunk Board 1.3, specifically in index.php, allowing remote attackers to execute arbitrary SQL commands via the forumID parameter. The reports indicate a remote exploit path with a base score of 7.5 (HIGH) under CVSS v2, but the provided...
CVE-2010-4862
SQL injection vulnerability in the JExtensions JE Directory comjedirectory component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in an item action to index.php...
CVE-2010-4869
CVE-2010-4869 targets DBHcms 1.1.4, where a SQL injection flaw in index.php allows remote attackers to inject arbitrary SQL via the editmenu parameter. The CVSS2 base score is 7.5 (HIGH) with network attack vector, no authentication, and partial impact on confidentiality, integrity, and availabil...
PT-2011-1800
Name of the Vulnerable Software and Affected Versions Joomla! component com jeguestbook version 1.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the d itemid parameter in an item detail action to index.php. Recommendations For...
PT-2011-1804
Name of the Vulnerable Software and Affected Versions DBHcms version 1.1.4 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the editmenu parameter in the index.php file. Recommendations For DBHcms version 1.1.4, avoid using the...
PT-2011-1801
Name of the Vulnerable Software and Affected Versions Chipmunk Board version 1.3 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. The issue is related to the forumID parameter in the "index.php" file. Recommendations For Chipmunk Board version 1.3, avoi...
PT-2011-1799
Name of the Vulnerable Software and Affected Versions Joomla! Club Manager com clubmanager component affected versions not specified Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the cm id parameter in an equip presenta...
PT-2011-1794
Name of the Vulnerable Software and Affected Versions WebAsyst Shop-Script affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the blog id parameter in a "news" action, specifically targeting the index.php file...
CVE-2010-4862: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the JExtensions JE Directory comjedirectory component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in an item action to index.php...
CVE-2010-4859: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in WebAsyst Shop-Script allows remote attackers to execute arbitrary SQL commands via the blogid parameter in a news action...
CVE-2010-4869: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in DBHcms 1.1.4 allows remote attackers to execute arbitrary SQL commands via the editmenu parameter...
CVE-2010-4866: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in Chipmunk Board 1.3 allows remote attackers to execute arbitrary SQL commands via the forumID parameter...
PT-2011-1797
Name of the Vulnerable Software and Affected Versions JExtensions JE Directory com jedirectory component version 1.0 for Joomla! Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the catid parameter in an item action to the "index.php"...
PT-2011-4791
Name of the Vulnerable Software and Affected Versions Zikula Application Framework versions 1.2.7, 1.3.0 build 3168 Description A cross-site scripting issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the themename parameter in the setasdefault...
WordPress Black-LetterHead Theme 1.5 - Cross Site Scripting
WordPress Black-LetterHead theme's "index.php" parameter is prone to a cross-site scripting vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can...
CVE-2011-3862
Cross-site scripting XSS vulnerability in the Morning Coffee theme before 3.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to index.php...
Cross site scripting
Cross-site scripting XSS vulnerability in the Morning Coffee theme before 3.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to index.php...
Cross site scripting
Cross-site scripting XSS vulnerability in the Black-LetterHead theme before 1.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to index.php...