172 matches found
CVE-2006-7247
CVE-2006-7247 affects the Weblinks (com_weblinks) component for Joomla! and Mambo up to version 1.0.9. The issue is an SQL injection via the title parameter, allowing remote attackers to execute arbitrary SQL commands. The NVD entry lists a high severity (CVSS v2 base score 7.5, network access, n...
CVE-2006-7247
SQL injection vulnerability in the Weblinks comweblinks component for Joomla! and Mambo 1.0.9 and earlier allows remote attackers to execute arbitrary SQL commands via the title parameter...
PT-2012-1256
Name of the Vulnerable Software and Affected Versions Joomla! versions 1.0.9 and earlier Mambo versions 1.0.9 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the title parameter. Recommendations For Joomla! versions 1.0.9 and...
CVE-2006-7247: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the Weblinks comweblinks component for Joomla! and Mambo 1.0.9 and earlier allows remote attackers to execute arbitrary SQL commands via the title parameter...
CVE-2010-4938
SQL injection vulnerability in the Weblinks comweblinks component in Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter in a categories action to index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third part...
Sql injection
SQL injection vulnerability in the Weblinks comweblinks component in Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter in a categories action to index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third part...
CVE-2010-4938
The vulnerability CVE-2010-4938 affects the Joomla! Weblinks component (com_weblinks). The root cause is an SQL injection via the Itemid parameter in a categories action to index.php, enabling remote attackers to execute arbitrary SQL commands. The public details in the provided documents do not ...
PT-2011-1873
Name of the Vulnerable Software and Affected Versions Joomla! affected versions not specified Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the Itemid parameter in a categories action to index.php in the Weblinks com...
CVE-2010-4938: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the Weblinks comweblinks component in Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter in a categories action to index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third part...
PT-2011-1467
Name of the Vulnerable Software and Affected Versions Joomla! versions 1.5.x through 1.5.21 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the filter order parameter in a com weblinks category action to "index.php", the filter order Dir...
PT-2010-5021
Name of the Vulnerable Software and Affected Versions Joomla! versions 1.5.x through 1.5.20 Joomla! versions 1.6.x through 1.6.0 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via vectors involving multiple encoded entities, as...
Joomla! Component Weblinks - Itemid SQL Injection
Joomla! Component Weblinks - Itemid SQL Injection source: https://www.securityfocus.com/bid/42455/info The 'comweblinks' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this...
CVE-2010-2679
SQL injection vulnerability in the Weblinks comweblinks component in Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a view action to index.php...
Sql injection
SQL injection vulnerability in the Weblinks comweblinks component in Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a view action to index.php...
CVE-2010-2679
SQL injection vulnerability in the Weblinks comweblinks component in Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a view action to index.php...
CVE-2010-2679
The vulnerability CVE-2010-2679 affects the Joomla! WebLinks extension (com_weblinks). It is a SQL injection flaw that can be triggered by the id parameter in the view action of index.php, allowing remote attackers to execute arbitrary SQL commands. The issue is documented with a high-severity CV...
CVE-2010-2679: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the Weblinks comweblinks component in Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a view action to index.php...
Joomla Weblinks SQL Injection
Securitylab.ir Application Info: Name: Joomla Component comweblinks Vulnerability Info: Type: Sql Injection Risk: Medium Vulnerability: http://site.com/index.php?option=comweblinks&task=view&catid=8&id=-1 UNION SELECT 1,2,3,4,5 Discoverd By: Pouya Daneshmand Website: http://Pouya.securitylab.ir...
Unfixed XSS vulnerability at www.constructionweblinks.com
Security researcher Xylitol, has submitted on 10/01/2009 a cross-site-scripting XSS vulnerability affecting www.constructionweblinks.com, which at the time of submission ranked 153063 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 27/04/2010. ...
SkyPortal WebLinks 0.12 Contents Change Vulnerability
No description provided by source. @=======================================@ ====C4TEAM.ORG====ByALBAYX====C4TEAM.ORG===== @=======================================@ @=Author : ByALBAYX @=Website : WWW.C4TEAM.ORG @=From : Turkish @=======================================@ @=Script :SkyPortal WebLin...