CVE-2008-2564: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the JotLoader comjotloader component 1.2.1.a and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the cid parameter to index.php...

Sql injection

SQL injection vulnerability in index.php in EasyWay CMS allows remote attackers to execute arbitrary SQL commands via the mid parameter...

CVE-2008-2555

CVE-2008-2555 involves a SQL injection in EasyWay CMS. The vulnerability is in the file index.php where the mid parameter can be exploited to execute arbitrary SQL commands. This is the supported, concrete detail from the connected documents. The sources do not specify exploitation specifics, aff...

CVE-2008-2555: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in EasyWay CMS allows remote attackers to execute arbitrary SQL commands via the mid parameter...

mambomambads-sql.txt

!/usr/bin/perl -w Mambo Component mambads 1.0 RC1 Beta & 1.0 RC1 Remote SQL Injection Found by : Houssamix From H-T Team H-T Team HouSSaMix + ToXiC350 from MoroCCo Greetz : Stack & CoNaN & HaCkeREgY & room-hacker & Hak3r-b0y & All friends & All muslims HaCkeRs : ScriptName: "Mambo" ComponentName:...

Mambo Component mambads 1.0 RC1 Beta - SQL Injection

Mambo Component mambads 1.0 RC1 Beta - SQL Injection !/usr/bin/perl -w Mambo Component mambads 1.0 RC1 Beta & 1.0 RC1 Remote SQL Injection Found by : Houssamix From H-T Team H-T Team HouSSaMix + ToXiC350 from MoroCCo Greetz : Stack & CoNaN & HaCkeREgY & room-hacker & Hak3r-b0y & All friends & All...

Sql injection

Multiple SQL injection vulnerabilities in index.php in Mambo before 4.6.4, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 articleid and 2 mcname parameters. NOTE: some of these details are obtained from third party information...

Sql injection

SQL injection vulnerability in index.php in MAXSITE 1.10 and earlier allows remote attackers to execute arbitrary SQL commands via the category parameter in a webboard action...

CVE-2008-2487

SQL injection vulnerability in index.php in MAXSITE 1.10 and earlier allows remote attackers to execute arbitrary SQL commands via the category parameter in a webboard action...

CVE-2008-2484

CVE-2008-2484 : A SQL injection in index.php of Xomol CMS 1.20071213 (magic_quotes_gpc disabled) allows remote attackers to execute arbitrary SQL via the email parameter. The NVD description confirms the vulnerable component and input vector; exploitation status is not provided in the connected d...

CVE-2008-2477

CVE-2008-2477 describes a SQL injection vulnerability in the MX-System/MxBB Portal 2.7.3, specifically in index.php where the vulnerable input is the page parameter. The underlying issue is improper handling of user-supplied input in constructing SQL queries, enabling remote attackers to execute ...

CVE-2008-2498

CVE-2008-2498 involves multiple SQL injection vulnerabilities in Mambo before 4.6.4. The flaws allow remote attackers to execute arbitrary SQL commands via the articleid and mcname parameters in index.php when magic_quotes_gpc is disabled. The issue is documented across multiple sources (NVD/NVD-...

CVE-2008-2494

CVE-2008-2494 describes a cross-site scripting (XSS) vulnerability in Zina 1.0 RC3, specifically in index.php, where an attacker can inject arbitrary web script or HTML through the l parameter. The connected records corroborate the issue as XSS affecting Zina 1.0 RC3; no explicit exploit details,...

CVE-2008-2498

Multiple SQL injection vulnerabilities in index.php in Mambo before 4.6.4, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 articleid and 2 mcname parameters. NOTE: some of these details are obtained from third party information...

CVE-2008-2495

Directory traversal vulnerability in index.php in Zina 1.0 RC3 allows remote attackers to have an unknown impact via a .. dot dot in the p parameter...

CVE-2008-2494

Cross-site scripting XSS vulnerability in index.php in Zina 1.0 RC3 allows remote attackers to inject arbitrary web script or HTML via the l parameter...

CVE-2008-2487

SQL injection vulnerability in index.php in MAXSITE 1.10 and earlier allows remote attackers to execute arbitrary SQL commands via the category parameter in a webboard action...

CVE-2008-2477: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in MxBB aka MX-System Portal 2.7.3 allows remote attackers to execute arbitrary SQL commands via the page parameter...

CVE-2008-2487: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in MAXSITE 1.10 and earlier allows remote attackers to execute arbitrary SQL commands via the category parameter in a webboard action...

CVE-2008-2495: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in Zina 1.0 RC3 allows remote attackers to have an unknown impact via a .. dot dot in the p parameter...