CVE-2008-0878

SQL injection vulnerability in index.php in the MyAnnonces 1.7 and earlier module for RunCMS allows remote attackers to execute arbitrary SQL commands via the cid parameter in a view action...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Jinzora Media Jukebox 2.7.5 allow remote attackers to inject arbitrary web script or HTML via the 1 frontend, 2 setfrontend, 3 jzpath, 4 theme, and 5 settheme parameters to a index.php; the frontend, theme, and 6 language parameters to b...

CVE-2008-0873

The CVE-2008-0873 entry describes a SQL injection in index.php of the jlmZone Classifieds module for XOOPS. The vulnerability is triggered through the cid parameter in an Adsview action, allowing remote attackers to execute arbitrary SQL commands. Affected software/component: XOOPS jlmZone Classi...

CVE-2008-0878

CVE-2008-0878 describes an SQL injection in the MyAnnonces 1.7 and earlier module for RunCMS. The vulnerability is triggered via the cid parameter in a view action, allowing remote attackers to execute arbitrary SQL commands. CVSSv2 base score is 7.5 (HIGH) with network attack, low complexity, no...

CVE-2008-0874

SQL injection vulnerability in index.php in the eEmpregos module for XOOPS allows remote attackers to execute arbitrary SQL commands via the cid parameter in a view action...

CVE-2008-0874

The vulnerability CVE-2008-0874 affects the XOOPS eEmpregos module, specifically index.php. The issue is a SQL injection in the view action triggered by the cid parameter, allowing remote attackers to execute arbitrary SQL commands. The NVD entry lists a CVSS v2.0 base score of 7.5 ( HIGH ) with ...

CVE-2008-0854

SQL injection vulnerability in the comsalesrep component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the rid parameter in a showrep action to index.php...

Sql injection

SQL injection vulnerability in the comdetail component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php. NOTE: this issue might be site-specific. If so, it should not be included in CVE...

CVE-2008-0855: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Facile Forms comfacileforms component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php...

CVE-2008-0877: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Jinzora Media Jukebox 2.7.5 allow remote attackers to inject arbitrary web script or HTML via the 1 frontend, 2 setfrontend, 3 jzpath, 4 theme, and 5 settheme parameters to a index.php; the frontend, theme, and 6 language parameters to b...

CVE-2008-0873: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in the jlmZone Classifieds module for XOOPS allows remote attackers to execute arbitrary SQL commands via the cid parameter in an Adsview action...

CVE-2008-0857: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in WoltLab Burning Board 3.0.3 PL 1 allows remote attackers to execute arbitrary SQL commands via the sortOrder parameter to the PMList page...

CVE-2008-0853: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the comdetail component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php. NOTE: this issue might be site-specific. If so, it should not be included in CVE...

CVE-2008-0854: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the comsalesrep component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the rid parameter in a showrep action to index.php...

CVE-2008-0874: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in the eEmpregos module for XOOPS allows remote attackers to execute arbitrary SQL commands via the cid parameter in a view action...

CVE-2008-0855

CVE-2008-0855 describes an SQL injection in the Facile Forms (com_facileforms) component for Joomla! and Mambo, exploitable via the catid parameter to index.php. The vulnerability, as documented by NVD, has a base score of 7.5 (HIGH) with network attack vector, no authentication, and partial impa...

CVE-2008-0849: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in the Downloads comdownloads component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the cat parameter in a selectcat function, a different vector than CVE-2008-0652...

CVE-2008-0850: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Dokeos 1.8.4 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to whoisonline.php, 2 trackinglistcoachescolumn parameter to main/mySpace/index.php, 3 tutorname parameter to main/createcourse/addcourse.php, the 4 Referer HTTP...

CVE-2008-0878: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in the MyAnnonces 1.7 and earlier module for RunCMS allows remote attackers to execute arbitrary SQL commands via the cid parameter in a view action...

CVE-2008-0841

SQL injection vulnerability in index.php in the Giorgio Nordo Ricette comricette 1.0 component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the id parameter...