3 matches found
Joomla! com_informations component 'themeid' parameter SQL injection vulnerability
Joomla! is the United States Open Source Matters team developed a set of open source content management system CMS. The system provides RSS feeds , site search and other functions . A SQL injection vulnerability exists in the 'themeid' parameter of the 'cominformations' component of Joomla! The...
PT-2014-6231
Name of the Vulnerable Software and Affected Versions Joomla! Youtube Gallery com youtubegallery component versions 3.x and 4.x through 4.1.7 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the listid or themeid parameter to "index.php"...
CVE-2014-4960: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in models\gallery.php in Youtube Gallery comyoutubegallery component 4.x through 4.1.7, and possibly 3.x, for Joomla! allow remote attackers to execute arbitrary SQL commands via the 1 listid or 2 themeid parameter to index.php...