Joomla! Portfolio Nexus - Remote File Inclusion

Joomla! Portfolio Nexus 1.5 contains a remote file inclusion vulnerability in the inertialFATE iF comifnexus component that allows remote attackers to include and execute arbitrary local files via a .. dot dot in the controller parameter to index.php. id: CVE-2009-4679 info: name: Joomla! Portfol...

Joomla Component iF surfALERT com_if_surfalert Local File Inclusion Vulnerability

No description provided by source. ================================================================================================================== o Joomla Component iF surfALERT Local File Inclusion Vulnerability Software : comifsurfalert version 1.2 Vendor : http://www.inertialfate.za.net/...

Joomla! Component iF surfALERT 1.2 - Local File Inclusion

Joomla! Component iF surfALERT 1.2 - Local File Inclusion ================================================================================================================== o Joomla Component iF surfALERT Local File Inclusion Vulnerability Software : comifsurfalert version 1.2 Vendor :...

Joomla! Component iF surfALERT 1.2 - Local File Inclusion

================================================================================================================== o Joomla Component iF surfALERT Local File Inclusion Vulnerability Software : comifsurfalert version 1.2 Vendor : http://www.inertialfate.za.net/ Author : AntiSecurity NoGe Vrs-hCk...

Directory traversal

Directory traversal vulnerability in the inertialFATE iF Portfolio Nexus comifnexus component 1.5 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. dot dot in the controller parameter to index.php...

CVE-2009-4679: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the inertialFATE iF Portfolio Nexus comifnexus component 1.5 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. dot dot in the controller parameter to index.php...

CVE-2009-4057

The CVE-2009-4057 issue affects the Joomla! component inertialFATE iF Portfolio Nexus (com_if_nexus) version 1.1. The root cause is an SQL injection via the id parameter in an item action to index.php, enabling remote execution of arbitrary SQL commands. This yields partial confidentiality, integ...

CVE-2009-4057: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the inertialFATE iF Portfolio Nexus comifnexus component 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in an item action to index.php...