CVE-2008-0609: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in DivideConcept VHD Web Pack 2.0 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the page parameter...

CVE-2008-0601: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in All Club CMS ACCMS 0.0.1f and earlier allows remote attackers to execute arbitrary SQL commands via the name parameter...

CVE-2008-0614: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Photokorn Gallery 1.543 allows remote attackers to execute arbitrary SQL commands via the pic parameter in a showpic action...

Mambo Component com_downloads - SQL Injection

joomla SQL Injectioncomdownloadsfilecatid AUTHOR : S@BUN HOME : http://www.hackturkiye.com DORKS 1 : allinurl :"comdownloads"filecatid EXPLOIT :...

CVE-2008-0606: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in the Shambo2 comshambo2 component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter...

CVE-2008-0603: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in the amazOOP Awesom! comawesom 0.3.2component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the listid parameter in a viewlist task...

CVE-2008-0607: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in the Sigsiu Online Business Index 2 SOBI2, comsobi2 2.5.3 component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the catid parameter. NOTE: the provenance of this information is unknown; the details are obtained...

CVE-2008-0602: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in All Club CMS ACCMS 0.0.1f and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the classname parameter...

CVE-2008-0612: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in htdocs/install/index.php in XOOPS 2.0.18 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lang parameter...

CVE-2008-0579

CVE-2008-0579 : A SQL injection vulnerability is present in Joomla!’s buslicense component (com_buslicense) in index.php, exploitable via the aid parameter in a list action, potentially enabling remote arbitrary SQL execution. Exploits are documented (e.g., Exploit-DB 5011). No remediation detail...

CVE-2008-0574

The provided connected and main CVE docs confirm CVE-2008-0574 is an XSS vulnerability in webSPELL 4.01.02. Specifically, index.php is vulnerable via the sort parameter in the whoisonline action, enabling remote attackers to inject arbitrary web script/HTML. Impact is consistent with an XSS in wh...

CVE-2008-0574

Cross-site scripting XSS vulnerability in index.php in webSPELL 4.01.02 allows remote attackers to inject arbitrary web script or HTML via the sort parameter in a whoisonline action...

CVE-2008-0579: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in the buslicense combuslicense component for Joomla! allows remote attackers to execute arbitrary SQL commands via the aid parameter in a list action...

CVE-2008-0574: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in webSPELL 4.01.02 allows remote attackers to inject arbitrary web script or HTML via the sort parameter in a whoisonline action...

Sql injection

SQL injection vulnerability in index.php in the CatalogShop comcatalogshop 1.0b1 componenent for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action...

Directory traversal

Multiple directory traversal vulnerabilities in Nilson's Blogger 0.11 allow remote attackers to include and execute arbitrary local files via a .. dot dot in 1 the permalink parameter in core.php, accessed through index.php; and 2 the thispost parameter in comments.php...

CVE-2008-0559

Multiple directory traversal vulnerabilities in Nilson's Blogger 0.11 allow remote attackers to include and execute arbitrary local files via a .. dot dot in 1 the permalink parameter in core.php, accessed through index.php; and 2 the thispost parameter in comments.php...

CVE-2008-0562

The vulnerability CVE-2008-0562 affects the Restaurant (com_restaurant) 1.0 component for Mambo and Joomla!, where an SQL injection can be triggered through the id parameter in a detail action (index.php). The issue is confirmed to be exploitable remotely over the network with low attack complexi...

CVE-2008-0557

CVE-2008-0557 affects CatalogShop (com_catalogshop) 1.0b1 for Mambo/Joomla!, with an SQL injection in index.php via the id parameter in the detail action. This remote-vector vulnerability could allow attackers to execute arbitrary SQL commands. The attached connected documents confirm the issue b...

CVE-2008-0559

Multiple directory traversal vulnerabilities in Nilson's Blogger 0.11 allow remote attackers to include and execute arbitrary local files via a .. dot dot in 1 the permalink parameter in core.php, accessed through index.php; and 2 the thispost parameter in comments.php...