Joomla Zap Weather FPD & Zap Calendar跨站脚本漏洞

No description provided by source. Title - Joomla Zap Weather FPD & Zap Calendar XSS Date: 01.21.2014 Vendor: zcontent.net extensions.joomla.org/extensions/owner/cogliano Versions - Z Weather v9 & Zap Calendar v4.0 Latests ATM Contant: smashatdevilteam.pl Zap Weather PoC -...

Joomla Zap Weather FPD & Zap Calendar XSS Vulnerability

Latests zcontent plugins suffers on cross site scripting and full path disclosure vulnerabilities because of poor variables filtration. Title - Joomla Zap Weather FPD & Zap Calendar XSS Date: 01.21.2014 Vendor: zcontent.net extensions.joomla.org/extensions/owner/cogliano Versions - Z Weather v9 &...

CVE-2013-3524

SQL injection vulnerability in popupnewsitem/ in the Pop Up News module 2.0 and possibly earlier for phpVMS allows remote attackers to execute arbitrary SQL commands via the itemid parameter. NOTE: this was originally reported as a problem in phpVMS...

CVE-2012-3435

SQL injection vulnerability in frontends/php/popupbitem.php in Zabbix 1.8.15rc1 and earlier, and 2.x before 2.0.2rc1, allows remote attackers to execute arbitrary SQL commands via the itemid parameter...

DEBIAN-CVE-2012-3435

SQL injection vulnerability in frontends/php/popupbitem.php in Zabbix 1.8.15rc1 and earlier, and 2.x before 2.0.2rc1, allows remote attackers to execute arbitrary SQL commands via the itemid parameter...

CVE-2012-3435

SQL injection vulnerability in frontends/php/popupbitem.php in Zabbix 1.8.15rc1 and earlier, and 2.x before 2.0.2rc1, allows remote attackers to execute arbitrary SQL commands via the itemid parameter...

CVE-2012-3435

SQL injection vulnerability in frontends/php/popupbitem.php in Zabbix 1.8.15rc1 and earlier, and 2.x before 2.0.2rc1, allows remote attackers to execute arbitrary SQL commands via the itemid parameter...

Genium CMS 2012|Q2 Cross Site Scripting

Title: ====== Genium CMS 2012|Q2 - Multiple Web Vulnerabilities Date: ===== 2012-05-02 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=517 VL-ID: ===== 517 Introduction: ============= Durch den Einsatz von Genium CMS können Sie Ihre Homepage schnell und unabhängig von...

CVE-2010-4968

SQL injection vulnerability in the webmaster-tips.net Flash Gallery comwmtpic component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter to index.php...

CVE-2010-4990

SQL injection vulnerability in the Front-edit Address Book comaddressbook component for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter in a contact action to index.php...

Sql injection

SQL injection vulnerability in the NinjaMonials comninjamonials component for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter in a display action to index.php...

CVE-2010-4995

SQL injection vulnerability in the NeoRecruit comneorecruit component 1.6.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter in an offerview action to index.php, a different vector than CVE-2007-4506...

Sql injection

SQL injection vulnerability in the NeoRecruit comneorecruit component 1.6.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter in an offerview action to index.php, a different vector than CVE-2007-4506...

CVE-2010-4993

SQL injection vulnerability in the eventcal comeventcal component 1.6.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter to index.php...

Sql injection

SQL injection vulnerability in the Front-edit Address Book comaddressbook component for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter in a contact action to index.php...

CVE-2010-4991

SQL injection vulnerability in the NinjaMonials comninjamonials component for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter in a display action to index.php...

CVE-2010-4991

SQL injection vulnerability in the NinjaMonials comninjamonials component for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter in a display action to index.php...

Sql injection

SQL injection vulnerability in the Weblinks comweblinks component in Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter in a categories action to index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third part...

CVE-2010-4857

SQL injection vulnerability in click.php in CAG CMS 0.2 Beta allows remote attackers to execute arbitrary SQL commands via the itemid parameter...

Sql injection

SQL injection vulnerability in click.php in CAG CMS 0.2 Beta allows remote attackers to execute arbitrary SQL commands via the itemid parameter...