3 matches found
CVE-2010-4902: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in the Clantools comclantools component 1.2.3 for Joomla! allow remote attackers to execute arbitrary SQL commands via the 1 squad or 2 showgame parameter to index.php...
CVE-2009-0379: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the Prince Clan Chess Club compcchess component for Joomla! allows remote attackers to execute arbitrary SQL commands via the gameid parameter in a showgame action to index.php, a different vector than CVE-2008-0761...
CVE-2006-3139: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in war.php in Virtual War VWar 1.5.0 R14 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 s, 2 showgame, 3 sortorder, and 4 sortby parameters...