23 matches found
CVE-2018-17397
SQL Injection exists in the AlphaIndex Dictionaries 1.0 component for Joomla! via the letter parameter...
CVE-2018-17397
SQL Injection exists in the AlphaIndex Dictionaries 1.0 component for Joomla! via the letter parameter...
Sql injection
SQL Injection exists in the AlphaIndex Dictionaries 1.0 component for Joomla! via the letter parameter...
CVE-2018-17397
SQL Injection exists in the AlphaIndex Dictionaries 1.0 component for Joomla! via the letter parameter...
CVE-2018-17397: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection exists in the AlphaIndex Dictionaries 1.0 component for Joomla! via the letter parameter...
CVE-2018-7312
SQL Injection exists in the Alexandria Book Library 3.1.2 component for Joomla! via the letter parameter...
CVE-2018-7312
SQL Injection exists in the Alexandria Book Library 3.1.2 component for Joomla! via the letter parameter...
Sql injection
SQL Injection exists in the Alexandria Book Library 3.1.2 component for Joomla! via the letter parameter...
CVE-2018-7312
SQL Injection exists in the Alexandria Book Library 3.1.2 component for Joomla! via the letter parameter...
CVE-2018-7312: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection exists in the Alexandria Book Library 3.1.2 component for Joomla! via the letter parameter...
CVE-2015-1434: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in my little forum before 2.3.4 allow remote administrators to execute arbitrary SQL commands via the 1 letter parameter in a user action or 2 editcategory parameter to index.php...
Joomla com_org SQL Injection Vulnerability (letter parameter)
Exploit for unknown platform in category web applications ============================================================= Joomla comorg SQL Injection Vulnerability letter parameter ============================================================= Joomla comorg SQL Injection Vulnerability letter paramet...
CVE-2008-6550: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in glossaire.php in Glossaire 2.0 allows remote attackers to inject arbitrary web script or HTML via the letter parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2008-3448: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in index.php in common solutions csphonebook 1.02 allows remote attackers to inject arbitrary web script or HTML via the letter parameter...
CVE-2008-2425
CVE-2008-2425 : FicHive 1.0 – SQL injection in index.php allowing remote attackers to execute arbitrary SQL via the letter parameter in a Search action. This entry notes a different vector than CVE-2008-2416 (category parameter in Fiction action). No remediation details are provided in the connec...
CVE-2008-2425: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in FicHive 1.0 allows remote attackers to execute arbitrary SQL commands via the letter parameter in a Search action, a different vector than CVE-2008-2416. NOTE: the provenance of this information is unknown; the details are obtained solely from third par...
CVE-2006-4756: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in alpha.php in phpMyDirectory 10.4.6 and earlier allows remote attackers to execute arbitrary SQL commands via the letter parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...
CVE-2006-4755: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in alpha.php in phpMyDirectory 10.4.6 and earlier allows remote attackers to inject arbitrary web script or HTML via the letter parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...
CVE-2006-0923: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in MyPHPNuke MPN 1.88 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the letter parameter in reviews.php and 2 the dcategory parameter in download.php...