Show filters
391 Total Results
Displaying 301-310 of 391
Sort by:
Attacker Value
Unknown
CVE-2008-2990
Disclosure Date: July 02, 2008 (last updated October 04, 2023)
PHP remote file inclusion vulnerability in facileforms.frame.php in the FacileForms (com_facileforms) component 1.4.4 for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the ff_compath parameter.
0
Attacker Value
Unknown
CVE-2008-2676
Disclosure Date: June 12, 2008 (last updated October 04, 2023)
SQL injection vulnerability in the iJoomla News Portal (com_news_portal) component 1.0 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter to index.php.
0
Attacker Value
Unknown
CVE-2008-2633
Disclosure Date: June 10, 2008 (last updated October 04, 2023)
Multiple SQL injection vulnerabilities in the EXP JoomRadio (com_joomradio) component 1.0 for Joomla! allow remote attackers to execute arbitrary SQL commands via the id parameter in a (1) show_radio or (2) show_video action to index.php.
0
Attacker Value
Unknown
CVE-2008-2632
Disclosure Date: June 10, 2008 (last updated October 04, 2023)
SQL injection vulnerability in the acctexp (com_acctexp) component 0.12.x and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the usage parameter in a subscribe action to index.php.
0
Attacker Value
Unknown
CVE-2008-2564
Disclosure Date: June 06, 2008 (last updated October 04, 2023)
SQL injection vulnerability in the JotLoader (com_jotloader) component 1.2.1.a and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the cid parameter to index.php.
0
Attacker Value
Unknown
CVE-2008-2568
Disclosure Date: June 06, 2008 (last updated October 04, 2023)
SQL injection vulnerability in the Simple Shop Galore (com_simpleshop) component 3.4 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a browse action to index.php.
0
Attacker Value
Unknown
CVE-2008-1935
Disclosure Date: April 25, 2008 (last updated October 04, 2023)
SQL injection vulnerability in the Filiale 1.0.4 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the idFiliale parameter.
0
Attacker Value
Unknown
CVE-2008-1849
Disclosure Date: April 16, 2008 (last updated October 04, 2023)
Directory traversal vulnerability in index.php in the joomlaXplorer (com_joomlaxplorer) Mambo/Joomla! component 1.6.2 and earlier allows remote attackers to list arbitrary directories via a .. (dot dot) in the dir parameter in a show_error action.
0
Attacker Value
Unknown
CVE-2008-1848
Disclosure Date: April 16, 2008 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in the joomlaXplorer (com_joomlaxplorer) Mambo/Joomla! component 1.6.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the error parameter in a show_error action to index.php.
0
Attacker Value
Unknown
CVE-2008-1533
Disclosure Date: March 28, 2008 (last updated October 04, 2023)
Unspecified vulnerability in the XML-RPC Blogger API plugin in Joomla! 1.5 allows remote attackers to perform unauthorized article operations on articles via unknown vectors.
0
