EUVD-2012-5024

Malware in sbrugna...

CVE-2012-5101

The affected software is Joomla! JE Poll component (before version 1.1). It has an SQL injection vulnerability that can allow remote attackers to execute arbitrary SQL commands via unspecified vectors. The root cause is a flaw in JE Poll prior to 1.1 that enables injection and data access/modific...

CVE-2012-5101: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the JExtensions JE Poll component before 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

PT-2012-5770

Name of the Vulnerable Software and Affected Versions JExtensions JE Poll component version 1.0 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. Recommendations For JExtensions JE Poll component version 1.0 and earlier, update to version 1.1 or later to...