PT-2013-1060

Name of the Vulnerable Software and Affected Versions Audio Player plugin versions prior to 2.0.4.6 typo3-src affected versions not specified Description The issue concerns a cross-site scripting XSS vulnerability and multiple vulnerabilities in the typo3-src package. The XSS vulnerability allows...

CVE-2013-1464: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in assets/player.swf in the Audio Player plugin before 2.0.4.6 for Wordpress allows remote attackers to inject arbitrary web script or HTML via the playerID parameter...

Joomla 'Teams' Component SQL Injection Vulnerability

This host is running Joomla with Teams component and is prone to SQL injection vulnerability. OpenVAS Vulnerability Test $Id: gbjoomlateamssqlinjvuln.nasl 7006 2017-08-25 11:51:20Z teissa $ Joomla 'Teams' Component SQL Injection Vulnerability Authors: Madhuri D Copyright: Copyright c 2011 Greenbo...

Joomla 'Teams' Component SQLi Vulnerability (Nov 2011)

Joomla with Teams component is prone to a SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Sql injection

SQL injection vulnerability in the Teams comteams component 110281008091711 for Joomla! allows remote attackers to execute arbitrary SQL commands via the PlayerID parameter in a player save action to index.php...

PT-2011-1876

Name of the Vulnerable Software and Affected Versions Joomla! affected versions not specified Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands via the PlayerID parameter in a player save action to "index.php". Recommendations At the moment, there is no...

CVE-2010-4941: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Teams comteams component 110281008091711 for Joomla! allows remote attackers to execute arbitrary SQL commands via the PlayerID parameter in a player save action to index.php...