287 matches found
CVE-2010-4990: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the Front-edit Address Book comaddressbook component for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter in a contact action to index.php...
PT-2011-1928
Name of the Vulnerable Software and Affected Versions Joomla! component eventcal com eventcal version 1.6.4 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the Itemid parameter in the "index.php" endpoint. Recommendations For version...
CVE-2010-4991: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the NinjaMonials comninjamonials component for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter in a display action to index.php...
PT-2011-1926
Name of the Vulnerable Software and Affected Versions Joomla! component com ninjamonials affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the Itemid parameter in a "display" action to "index.php"...
PT-2011-1930
Name of the Vulnerable Software and Affected Versions Joomla! component NeoRecruit com neorecruit version 1.6.4 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the Itemid parameter in an offer view action to "index.php"...
CVE-2010-4995: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the NeoRecruit comneorecruit component 1.6.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter in an offerview action to index.php, a different vector than CVE-2007-4506...
CVE-2010-4968: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the webmaster-tips.net Flash Gallery comwmtpic component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter to index.php...
Sql injection
SQL injection vulnerability in the Weblinks comweblinks component in Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter in a categories action to index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third part...
PT-2011-1873
Name of the Vulnerable Software and Affected Versions Joomla! affected versions not specified Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the Itemid parameter in a categories action to index.php in the Weblinks com...
CVE-2010-4938: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the Weblinks comweblinks component in Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter in a categories action to index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third part...
CVE-2010-4857
SQL injection vulnerability in click.php in CAG CMS 0.2 Beta allows remote attackers to execute arbitrary SQL commands via the itemid parameter...
Sql injection
SQL injection vulnerability in click.php in CAG CMS 0.2 Beta allows remote attackers to execute arbitrary SQL commands via the itemid parameter...
CVE-2010-4857: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in click.php in CAG CMS 0.2 Beta allows remote attackers to execute arbitrary SQL commands via the itemid parameter...
PT-2011-1792
Name of the Vulnerable Software and Affected Versions CAG CMS version 0.2 Beta Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the itemid parameter in the "click.php" file. Recommendations For CAG CMS version 0.2 Beta, avoid using...
PT-2011-1800
Name of the Vulnerable Software and Affected Versions Joomla! component com jeguestbook version 1.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the d itemid parameter in an item detail action to index.php. Recommendations For...
CVE-2010-4846
SQL injection vulnerability in viewitem.php in MH Products Pay Pal Shop Digital allows remote attackers to execute arbitrary SQL commands via the ItemID parameter...
CVE-2010-4847
SQL injection vulnerability in viewitem.php in MH Products MHP Downloadshop allows remote attackers to execute arbitrary SQL commands via the ItemID parameter...
Sql injection
SQL injection vulnerability in viewitem.php in MH Products Pay Pal Shop Digital allows remote attackers to execute arbitrary SQL commands via the ItemID parameter...