EUVD-2010-1506

Malware in sbrugna...

RokModule Component for Joomla! 'moduleid' Parameter SQi

The version of the RokModule component for Joomla! running on the remote host is affected by a SQL injection vulnerability due to improper sanitization of user-supplied input to the 'moduleid' parameter before using it to construct database queries. Regardless of the PHP 'magicquotesgpc' setting,...

Sql injection

SQL injection vulnerability in index.php in weenCompany 4.0.0 allows remote attackers to execute arbitrary SQL commands via the moduleid parameter. NOTE: some of these details are obtained from third party information...

CVE-2009-4423

CVE-2009-4423 affects weenCompany 4.0.0. A flaw in index.php allows remote SQL command execution via the moduleid parameter (SQL injection). The vulnerability is documented across multiple sources as a SQLi issue with impact to confidentiality, integrity, and availability (partial). No explicit r...