CVE-2018-17397

SQL Injection exists in the AlphaIndex Dictionaries 1.0 component for Joomla! via the letter parameter...

CVE-2018-17397

SQL Injection exists in the AlphaIndex Dictionaries 1.0 component for Joomla! via the letter parameter...

Sql injection

SQL Injection exists in the AlphaIndex Dictionaries 1.0 component for Joomla! via the letter parameter...

CVE-2018-17397: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in the AlphaIndex Dictionaries 1.0 component for Joomla! via the letter parameter...

CVE-2018-17397

SQL Injection exists in the AlphaIndex Dictionaries 1.0 component for Joomla! via the letter parameter...

CVE-2018-7312

SQL Injection exists in the Alexandria Book Library 3.1.2 component for Joomla! via the letter parameter...

CVE-2018-7312

SQL Injection exists in the Alexandria Book Library 3.1.2 component for Joomla! via the letter parameter...

Sql injection

SQL Injection exists in the Alexandria Book Library 3.1.2 component for Joomla! via the letter parameter...

CVE-2018-7312

SQL Injection exists in the Alexandria Book Library 3.1.2 component for Joomla! via the letter parameter...

CVE-2018-7312: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in the Alexandria Book Library 3.1.2 component for Joomla! via the letter parameter...

PT-2018-18016

Name of the Vulnerable Software and Affected Versions Alexandria Book Library version 3.1.2 Description The issue exists due to SQL Injection in the Alexandria Book Library component for Joomla!, which can be exploited via the letter parameter. Recommendations For Alexandria Book Library version...

CVE-2015-1434

Multiple SQL injection vulnerabilities in my little forum before 2.3.4 allow remote administrators to execute arbitrary SQL commands via the 1 letter parameter in a user action or 2 editcategory parameter to index.php...

PT-2015-5285

Name of the Vulnerable Software and Affected Versions my little forum versions prior to 2.3.4 Description The issue allows remote administrators to execute arbitrary SQL commands. This can be achieved via the letter parameter in a user action or the edit category parameter to "index.php"...

CVE-2015-1434: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in my little forum before 2.3.4 allow remote administrators to execute arbitrary SQL commands via the 1 letter parameter in a user action or 2 editcategory parameter to index.php...

Joomla com_org SQL Injection Vulnerability (letter parameter)

Exploit for unknown platform in category web applications ============================================================= Joomla comorg SQL Injection Vulnerability letter parameter ============================================================= Joomla comorg SQL Injection Vulnerability letter paramet...

CVE-2008-6550: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in glossaire.php in Glossaire 2.0 allows remote attackers to inject arbitrary web script or HTML via the letter parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-3448: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in common solutions csphonebook 1.02 allows remote attackers to inject arbitrary web script or HTML via the letter parameter...

CVE-2008-2425

CVE-2008-2425 : FicHive 1.0 – SQL injection in index.php allowing remote attackers to execute arbitrary SQL via the letter parameter in a Search action. This entry notes a different vector than CVE-2008-2416 (category parameter in Fiction action). No remediation details are provided in the connec...

CVE-2008-2425: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in FicHive 1.0 allows remote attackers to execute arbitrary SQL commands via the letter parameter in a Search action, a different vector than CVE-2008-2416. NOTE: the provenance of this information is unknown; the details are obtained solely from third par...

CVE-2006-4755: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in alpha.php in phpMyDirectory 10.4.6 and earlier allows remote attackers to inject arbitrary web script or HTML via the letter parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...