Show filters
16 Total Results
Displaying 1-10 of 16
Sort by:
Attacker Value
Unknown
CVE-2018-6368
Disclosure Date: February 17, 2018 (last updated November 26, 2024)
SQL Injection exists in the JomEstate PRO through 3.7 component for Joomla! via the id parameter in a task=detailed action.
0
Attacker Value
Unknown
CVE-2008-6250
Disclosure Date: February 23, 2009 (last updated October 04, 2023)
SQL injection vulnerability in Comdev Web Blogger 4.1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the arcmonth parameter to a blog page.
0
Attacker Value
Unknown
CVE-2008-1872
Disclosure Date: April 17, 2008 (last updated October 04, 2023)
SQL injection vulnerability in home.news.php in Comdev News Publisher 4.1.2 allows remote attackers to execute arbitrary SQL commands via the arcmonth parameter. NOTE: some of these details are obtained from third party information.
0
Attacker Value
Unknown
CVE-2007-3084
Disclosure Date: June 06, 2007 (last updated October 04, 2023)
PHP remote file inclusion vulnerability in sampleblogger.php in Comdev Web Blogger 4.1 allows remote attackers to execute arbitrary PHP code via a URL in the path[docroot] parameter, a different vector than CVE-2006-5441.
0
Attacker Value
Unknown
CVE-2007-3081
Disclosure Date: June 06, 2007 (last updated October 04, 2023)
PHP remote file inclusion vulnerability in sampleecommerce.php in Comdev eCommerce 4.1 allows remote attackers to execute arbitrary PHP code via a URL in the path[docroot] parameter.
0
Attacker Value
Unknown
CVE-2007-2422
Disclosure Date: May 02, 2007 (last updated November 08, 2023)
Multiple PHP remote file inclusion vulnerabilities in Modules Builder (modbuild) 4.1 for Comdev One Admin allow remote attackers to execute arbitrary PHP code via a URL in the path[docroot] parameter to (1) config-bak.php or (2) config.php. NOTE: CVE disputes this vulnerability because the unmodified scripts set the applicable variable to the empty string; reasonable modified copies would use a fixed pathname string
0
Attacker Value
Unknown
CVE-2006-6045
Disclosure Date: November 22, 2006 (last updated October 04, 2023)
Multiple PHP remote file inclusion vulnerabilities in Comdev One Admin Pro 4.1 allow remote attackers to execute arbitrary PHP code via a URL in the path[skin] parameter to (1) adminfoot.php, (2) adminhead.php, or (3) adminlogin.php.
0
Attacker Value
Unknown
CVE-2006-5440
Disclosure Date: October 20, 2006 (last updated October 04, 2023)
PHP remote file inclusion vulnerability in adminfoot.php in Comdev Form Designer 4.1, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the path[docroot] parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information.
0
Attacker Value
Unknown
CVE-2006-5438
Disclosure Date: October 20, 2006 (last updated October 04, 2023)
PHP remote file inclusion vulnerability in adminfoot.php in Comdev Forum 4.1, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the path[docroot] parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information.
0
Attacker Value
Unknown
CVE-2006-5439
Disclosure Date: October 20, 2006 (last updated October 04, 2023)
PHP remote file inclusion vulnerability in adminfoot.php in Comdev Misc Tools 4.1, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the path[docroot] parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information.
0
