CVE-2009-4651

Multiple cross-site scripting XSS vulnerabilities in the Webee Comments comwebeecomment component 1.1.1, 1.2, and 2.0 for Joomla! allow remote attackers to inject arbitrary web script or HTML via the 1 color, 2 img, or 3 url BBCode tags in unspecified vectors...

CVE-2009-4650

SQL injection vulnerability in the Webee Comments comwebeecomment component 1.1.1, 1.2, and 2.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the articleId parameter in a default action to index2.php. NOTE: some of these details are obtained from third party informatio...

EUVD-2009-4615

Malware in sbrugna...

EUVD-2009-4616

Malware in sbrugna...

Webee Comments Component 1.1/1.2 for Joomla! Multiple BBCode Tags XSS

No description provided by source. source: http://www.securityfocus.com/bid/38204/info The Joomla! Webee component is prone to an SQL-injection vulnerability and HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input. An attacker may leverage the HTML-injecti...

Webee Comments Component 1.1/1.2 for Joomla! index2.php articleId SQL Injection

No description provided by source. !/usr/bin/env python coding: utf-8 from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register import re class TestPOCPOCBase: vulID = '86842' ssvid version = '1.0' author = 'kikay' vulDate = '2010-02-22' createDate ...

Joomla Webee 2.0 Local File Inclusion

================================================================================================================== o Joomla Component Webee Comments Local File Inclusion Vulnerability Software : comwebeecomment version 2.0 Vendor : http://www.onnogroen.nl/webee/ Author : AntiSecurity s4va NoGe...

Joomla Component Webee Comments Local File Inclusion Vulnerability

No description provided by source. ================================================================================================================== o Joomla Component Webee Comments Local File Inclusion Vulnerability Software : comwebeecomment version 2.0 Vendor : http://www.onnogroen.nl/webee/...

Joomla! Component com_webeecomment 2.0 - Local File Inclusion

================================================================================================================== o Joomla Component Webee Comments Local File Inclusion Vulnerability Software : comwebeecomment version 2.0 Vendor : http://www.onnogroen.nl/webee/ Author : AntiSecurity s4va NoGe...

Joomla! Component com_webeecomment 2.0 - Local File Inclusion

Joomla! Component comwebeecomment 2.0 - Local File Inclusion ================================================================================================================== o Joomla Component Webee Comments Local File Inclusion Vulnerability Software : comwebeecomment version 2.0 Vendor :...

CVE-2009-4650

SQL injection vulnerability in the Webee Comments comwebeecomment component 1.1.1, 1.2, and 2.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the articleId parameter in a default action to index2.php. NOTE: some of these details are obtained from third party informatio...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Webee Comments comwebeecomment component 1.1.1, 1.2, and 2.0 for Joomla! allow remote attackers to inject arbitrary web script or HTML via the 1 color, 2 img, or 3 url BBCode tags in unspecified vectors...

CVE-2009-4651

Multiple cross-site scripting XSS vulnerabilities in the Webee Comments comwebeecomment component 1.1.1, 1.2, and 2.0 for Joomla! allow remote attackers to inject arbitrary web script or HTML via the 1 color, 2 img, or 3 url BBCode tags in unspecified vectors...

Sql injection

SQL injection vulnerability in the Webee Comments comwebeecomment component 1.1.1, 1.2, and 2.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the articleId parameter in a default action to index2.php. NOTE: some of these details are obtained from third party informatio...

CVE-2009-4650

The CVE covers a SQL injection vulnerability in the Joomla! extension Webee Comments (com_webeecomment) , affecting versions 1.1.1, 1.2, and 2.0 . The flaw allows remote attackers to inject arbitrary SQL via the articleId parameter in the default action to index2.php , enabling execution of arbit...

CVE-2009-4651

CVE-2009-4651 affects Joomla! through the Webee Comments (com_webeecomment) component versions 1.1.1, 1.2, and 2.0. The root cause is cross-site scripting (XSS) in the way BBCode tags (color, img, url) are processed, allowing remote attackers to inject arbitrary script or HTML via unspecified vec...

CVE-2009-4650

SQL injection vulnerability in the Webee Comments comwebeecomment component 1.1.1, 1.2, and 2.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the articleId parameter in a default action to index2.php. NOTE: some of these details are obtained from third party informatio...

CVE-2009-4651

Multiple cross-site scripting XSS vulnerabilities in the Webee Comments comwebeecomment component 1.1.1, 1.2, and 2.0 for Joomla! allow remote attackers to inject arbitrary web script or HTML via the 1 color, 2 img, or 3 url BBCode tags in unspecified vectors...

Joomla! Component Webee Comments 1.1/1.2 - Multiple BBCode Tags Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/38204/info The Joomla! Webee component is prone to an SQL-injection vulnerability and HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input. An attacker may leverage the HTML-injection issues to execute arbitrary...

Joomla! Component Webee Comments 1.11.2 - Multiple BBCode Tags Cross-Site Scripting Vulnerabilities

Joomla! Component Webee Comments 1.11.2 - Multiple BBCode Tags Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/38204/info The Joomla! Webee component is prone to an SQL-injection vulnerability and HTML-injection vulnerabilities because it fails to sufficiently...