joomlacommon-sql.txt

Commonwealth Business Council SQL Injection AUTHOR : S@BUN HOME : http://www.hackturkiye.com DORK 1 : allinurl: "index.php?option=comdoc" DORK 2: "Commonwealth Business Council EXPLOIT :...

Mambo Component Sermon 0.2 (gid) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================ Mambo Component Sermon 0.2 gid SQL Injection Vulnerability ============================================================ DORKS 1 : allinurl:"comnacontent" DORK 2 :...

Mambo Component Sermon 0.2 - 'gid' SQL Injection

netadvantist@copyright 2006 SQL Injectioncomnaxxx AUTHOR : S@BUN HOME : http://www.hackturkiye.com DORKS 1 : allinurl:"comnacontent" DORK 2 : allinurl:"comnabible" DORKS 3 : allinurl:"comnaevents" DORKS 4 : allinurl:"comnacontent" DORKS 5 : allinurl:"comnafeedback" DORKS 6 : allinurl:"comnamydocs...

CVE-2008-0612

Directory traversal vulnerability in htdocs/install/index.php in XOOPS 2.0.18 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lang parameter...

Sql injection

SQL injection vulnerability in index.php in All Club CMS ACCMS 0.0.1f and earlier allows remote attackers to execute arbitrary SQL commands via the name parameter...

CVE-2008-0603

SQL injection vulnerability in index.php in the amazOOP Awesom! comawesom 0.3.2component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the listid parameter in a viewlist task...

CVE-2008-0606

CVE-2008-0606 describes a SQL injection vulnerability in the Shambo2 (com_shambo2) component used by Mambo and Joomla!. The vulnerability is triggered in index.php via the Itemid parameter, allowing remote attackers to execute arbitrary SQL commands. Multiple sources (NVD, CVE lists, Prio) consis...

CVE-2008-0609

CVE-2008-0609 describes a directory traversal vulnerability in DivideConcept VHD Web Pack 2.0 (index.php) that allows remote attackers to include and execute arbitrary local files via .. in the page parameter. The NVD lists a base score of 7.5 (HIGH) with network access, low attack complexity, an...

CVE-2008-0602

CVE-2008-0602 affects All Club CMS (ACCMS) versions 0.0.1f and earlier. The vulnerability is a directory traversal flaw in index.php that allows remote attackers to include and execute arbitrary local files via traversal sequences in the class_name parameter. Client impact per CVSS2 is Partial co...

CVE-2008-0603

The vulnerability CVE-2008-0603 affects the amazOOP Awesom! (com_awesom) 0.3.2 component for Mambo/Joomla!, with the SQL injection in index.php via the listid parameter in the viewlist task. The underlying issue is a SQL injection in the affected component/file that allows remote attackers to man...

Mambo Component com_downloads - SQL Injection

Mambo Component comdownloads - SQL Injection joomla SQL Injectioncomdownloadsfilecatid AUTHOR : S@BUN HOME : http://www.hackturkiye.com DORKS 1 : allinurl :"comdownloads"filecatid EXPLOIT :...

Mambo Component com_downloads - SQL Injection

joomla SQL Injectioncomdownloadsfilecatid AUTHOR : S@BUN HOME : http://www.hackturkiye.com DORKS 1 : allinurl :"comdownloads"filecatid EXPLOIT :...

CVE-2008-0579

CVE-2008-0579 : A SQL injection vulnerability is present in Joomla!’s buslicense component (com_buslicense) in index.php, exploitable via the aid parameter in a list action, potentially enabling remote arbitrary SQL execution. Exploits are documented (e.g., Exploit-DB 5011). No remediation detail...

CVE-2008-0574

Cross-site scripting XSS vulnerability in index.php in webSPELL 4.01.02 allows remote attackers to inject arbitrary web script or HTML via the sort parameter in a whoisonline action...

CVE-2008-0574

The provided connected and main CVE docs confirm CVE-2008-0574 is an XSS vulnerability in webSPELL 4.01.02. Specifically, index.php is vulnerable via the sort parameter in the whoisonline action, enabling remote attackers to inject arbitrary web script/HTML. Impact is consistent with an XSS in wh...

Sql injection

SQL injection vulnerability in index.php in the CatalogShop comcatalogshop 1.0b1 componenent for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action...

Directory traversal

Multiple directory traversal vulnerabilities in Nilson's Blogger 0.11 allow remote attackers to include and execute arbitrary local files via a .. dot dot in 1 the permalink parameter in core.php, accessed through index.php; and 2 the thispost parameter in comments.php...

CVE-2008-0559

Multiple directory traversal vulnerabilities in Nilson's Blogger 0.11 allow remote attackers to include and execute arbitrary local files via a .. dot dot in 1 the permalink parameter in core.php, accessed through index.php; and 2 the thispost parameter in comments.php...

CVE-2008-0562

The vulnerability CVE-2008-0562 affects the Restaurant (com_restaurant) 1.0 component for Mambo and Joomla!, where an SQL injection can be triggered through the id parameter in a detail action (index.php). The issue is confirmed to be exploitable remotely over the network with low attack complexi...

CVE-2008-0559

Multiple directory traversal vulnerabilities in Nilson's Blogger 0.11 allow remote attackers to include and execute arbitrary local files via a .. dot dot in 1 the permalink parameter in core.php, accessed through index.php; and 2 the thispost parameter in comments.php...