CVE-2008-0844

CVE-2008-0844 is a SQL injection vulnerability in the Joomla! PccookBook (com_pccookbook) component. The flaw affects index.php and allows remote attackers to execute arbitrary SQL commands via the user_id parameter. The issue is documented with a high-severity CVSS v2 base score (7.5, HIGH) and ...

CVE-2008-0846

CVE-2008-0846 is a SQL injection vulnerability in Joomla!’s com_profile component (index.php) that allows remote attackers to supply an oid parameter to execute arbitrary SQL commands. The description across multiple trusted sources confirms the same flaw and parameter. The NVD entry lists the af...

CVE-2008-0841

The CVE-2008-0841 entry concerns a SQL injection in Joomla! and Mambo’s com_ricette 1.0 (Giorgio Nordo Ricette) where the vulnerable component is index.php and the id parameter can be manipulated by an attacker to execute arbitrary SQL commands remotely. This is supported by the NVD description a...

CVE-2008-0833

CVE-2008-0833 describes an SQL injection in Joomla!'s com_galeria component, specifically in index.php during a detail action where the id parameter can be exploited to run arbitrary SQL commands. The vulnerability allows remote attackers to execute arbitrary SQL, potentially impacting data integ...

joomlamag-sql.txt

joomla SQL Injectioncommagazine AUTHOR : S@BUN HOME 1 : http://www.milw0rm.com/author/1334 MAİL : [email protected] DORK 1 : allinurl :"commagazine"pageid= DORK 2 : allinurl: EXPLOIT :...

joomla SQL Injection(com_detail)

joomla SQL Injectioncomdetail AUTHOR : S@BUN HOME 1 : http://www.milw0rm.com/author/1334 MAL : [email protected] DORK 1 : allinurl :"comdetail" DORK 2 : allinurl: EXPLOIT :...

Joomla Component com_hwdvideoshare SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================== Joomla Component comhwdvideoshare SQL Injection Vulnerability ============================================================== joomla SQL Injectioncomhwdvideoshare+Powered by...

CVE-2008-0844: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in the PccookBook compccookbook component for Joomla! allows remote attackers to execute arbitrary SQL commands via the userid parameter...

joomlateam-sql.txt

joomla SQL Injectioncomteam AUTHOR : S@BUN HOME 1 : http://www.milw0rm.com/author/1334 MAİL : [email protected] DORK 1 : allinurl :"comteam" DORK 2 : allinurl: EXPLOIT : index.php?option=comteam&gid=-1//union//select//1,2,3,password,5,6,7,8,9,10,username,12,13//from//josusers/ S@B...

xoopsseminars-sql.txt

XOOPS Module seminars SQL Injection AUTHOR : S@BUN HOME 1 : http://www.milw0rm.com/author/1334 MAİL : [email protected] DORK 1 : allinurl :"modules/seminars/index.php?op=show" DORK 2 : allinurl: EXPLOIT :...

joomladetail-sql.txt

joomla SQL Injectioncomdetail AUTHOR : S@BUN HOME 1 : http://www.milw0rm.com/author/1334 MAİL : [email protected] DORK 1 : allinurl: comdetail DORK 2 : allinurl: EXPLOIT :...

joomlagenealogy-sql.txt

joomla SQL Injectioncomgenealogy AUTHOR : S@BUN HOME 1 : http://www.milw0rm.com/author/1334 MAİL : [email protected] DORK 1 : allinurl :"comgenealogy" DORK 2 : allinurl: EXPLOIT :...

joomlageoboerse-sql.txt

joomla SQL Injectioncomgeoboerse AUTHOR : S@BUN HOME 1 : http://www.milw0rm.com/author/1334 MAİL : [email protected] DORK 1 : allinurl :"comgeoboerse" DORK 2 : allinurl: EXPLOIT :...

CVE-2008-0841: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in the Giorgio Nordo Ricette comricette 1.0 component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-0846: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in the comprofile component for Joomla! allows remote attackers to execute arbitrary SQL commands via the oid parameter...

CVE-2008-0833: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in the comgaleria component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action...

CVE-2008-0842: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in the Classifier comclasifier component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2008-0819

Directory traversal vulnerability in index.php in PlutoStatus Locator 1.0 pre alpha allows remote attackers to include and execute arbitrary local files via a .. dot dot in the page parameter...

CVE-2008-0822

CVE-2008-0822 affects Scribe 0.2: a directory traversal in index.php via the page parameter (".."), enabling read of arbitrary local files. Root cause is insufficient input validation. Impact is local confidentiality exposure (PARTIAL). CVSS v2 base score 3.6 (LOW) with LOCAL access and no authen...

CVE-2008-0820: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in Etomite 0.6.1.4 Final allows remote attackers to inject arbitrary web script or HTML via $SERVER'PHPINFO'. NOTE: the vendor disputes this issue in a followup, stating that the affected variable is $SERVER'PHPSELF', and "This is not an Etomite...