EUVD-2006-7106

Malware in sbrugna...

EUVD-2006-7105

Malware in sbrugna...

EUVD-2006-7107

Malware in sbrugna...

EUVD-2006-7104

Malware in sbrugna...

CVE-2006-4995

PHP remote file inclusion vulnerability in BSQ Sitestats bsqsitestats before 2.1.1 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2006-7122

Cross-site scripting XSS vulnerability in the IP Address Lookup functionality in BSQ Sitestats component for Joomla 1.8.0, and possibly other versions before 2.2.1, allows remote attackers to inject arbitrary web script and HTML via the ip parameter...

CVE-2006-7125

Cross-site scripting XSS vulnerability in Joomla BSQ Sitestats 1.8.0 and 2.2.1 allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer header, which is not properly handled when the administrator views site statistics...

CVE-2006-7123

Multiple SQL injection vulnerabilities in BSQ Sitestats component for Joomla 1.8.0, and possibly other versions before 2.2.1, allow remote attackers to execute arbitrary SQL commands via 1 unspecified parameters when importing the a ip-to-country.csv file; and the 2 HTTP Referer, 3 HTTP User Agen...

CVE-2006-7124

PHP remote file inclusion vulnerability in external/rssfeeds.php in BSQ Sitestats component for Joomla 1.8.0, and possibly other versions before 2.2.1, allows remote attackers to execute arbitrary PHP code via the baseDir parameter...

CVE-2006-7126

SQL injection vulnerability in Joomla BSQ Sitestats 1.8.0 and 2.2.1 allows remote attackers to execute arbitrary SQL commands via the query string, possibly PHPSELF...

CVE-2006-7123

Multiple SQL injection vulnerabilities in BSQ Sitestats component for Joomla 1.8.0, and possibly other versions before 2.2.1, allow remote attackers to execute arbitrary SQL commands via 1 unspecified parameters when importing the a ip-to-country.csv file; and the 2 HTTP Referer, 3 HTTP User Agen...

CVE-2006-7125

The CVE-2006-7125 entry describes a Cross-site Scripting (XSS) vulnerability in Joomla BSQ Sitestats versions 1.8.0 and 2.2.1. The issue allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer header, which is not properly sanitized when an administrator views site sta...

CVE-2006-7125

Cross-site scripting XSS vulnerability in Joomla BSQ Sitestats 1.8.0 and 2.2.1 allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer header, which is not properly handled when the administrator views site statistics...

CVE-2006-7124

CVE-2006-7124 describes a PHP remote file inclusion in BSQ Sitestats (Joomla) 1.8.0 and possibly earlier versions prior to 2.2.1. The flaw, triggered by the baseDir parameter in external/rssfeeds.php, allows an attacker to execute arbitrary PHP code on the affected server. Impact is noted as part...

CVE-2006-7126

SQL injection vulnerability in Joomla BSQ Sitestats 1.8.0 and 2.2.1 allows remote attackers to execute arbitrary SQL commands via the query string, possibly PHPSELF...

CVE-2006-7122

CVE-2006-7122 is a cross-site scripting (XSS) issue in the IP Address Lookup of BSQ Sitestats for Joomla. Affects 1.8.0 and possibly earlier versions; vulnerable parameter: ip. Exploitation could inject arbitrary script/HTML. Remediation: upgrade to a version containing the fix (2.2.1) or apply t...

CVE-2006-7126

CVE-2006-7126 affects Joomla BSQ Sitestats versions 1.8.0 and 2.2.1. The vulnerability is an SQL injection caused by unsanitized input in the query string (possibly PHP_SELF), enabling remote attackers to execute arbitrary SQL commands. The connected sources confirm the affected product and the i...

CVE-2006-7123

CVE-2006-7123 concerns BSQ Sitestats (a Joomla component) version 1.8.0 and possibly earlier than 2.2.1. The vulnerability is described as multiple SQL injection flaws that allow remote attackers to execute arbitrary SQL commands through (1) parameters during the import of ip-to-country.csv and (...

Secunia Research: Joomla BSQ Sitestats Component Multiple Vulnerabilities

====================================================================== Secunia Research 29/09/2006 - Joomla BSQ Sitestats Component Multiple Vulnerabilities - ====================================================================== Table of Contents Affected...

CVE-2006-4995

PHP remote file inclusion vulnerability in BSQ Sitestats bsqsitestats before 2.1.1 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...