Joomla Archives - CVE Vulnerability

CVE-2008-7033

Sun, 26 Feb 2023 09:11:49 +0000

SQL injection vulnerability in the Simple Shop Galore (com_simpleshop) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the section parameter in a section action to index.php, a different vulnerability than CVE-2008-2568. NOTE: this issue was disclosed by an unreliable researcher, so the details might be incorrect.

The post CVE-2008-7033 appeared first on CVE Vulnerability.

CVE-2008-6841

Sun, 26 Feb 2023 09:11:44 +0000

PHP remote file inclusion vulnerability in the Green Mountain Information Technology and Consulting Database Query (com_dbquery) component 1.4.1.1 and earlier for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter to classes/DBQ/admin/common.class.php.

The post CVE-2008-6841 appeared first on CVE Vulnerability.

CVE-2008-6653

Sun, 26 Feb 2023 09:11:38 +0000

SQL injection vulnerability in webhosting.php in the Webhosting Component (com_webhosting) module before 1.1 RC7 for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php.

The post CVE-2008-6653 appeared first on CVE Vulnerability.

CVE-2008-5643

Sun, 26 Feb 2023 09:11:06 +0000

SQL injection vulnerability in the Books (com_books) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the book_id parameter in a book_details action to index.php.

The post CVE-2008-5643 appeared first on CVE Vulnerability.

CVE-2008-3132

Sun, 26 Feb 2023 09:09:52 +0000

SQL injection vulnerability in the beamospetition (com_beamospetition) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the pet parameter to index.php.

The post CVE-2008-3132 appeared first on CVE Vulnerability.

CVE-2008-3083

Sun, 26 Feb 2023 09:09:50 +0000

SQL injection vulnerability in Brightcode Weblinks (com_brightweblinks) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter.

The post CVE-2008-3083 appeared first on CVE Vulnerability.

CVE-2008-2632

Sun, 26 Feb 2023 09:09:37 +0000

SQL injection vulnerability in the acctexp (com_acctexp) component 0.12.x and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the usage parameter in a subscribe action to index.php.

The post CVE-2008-2632 appeared first on CVE Vulnerability.

CVE-2008-2643

Sun, 26 Feb 2023 09:09:37 +0000

SQL injection vulnerability in the Bible Study (com_biblestudy) component before 6.0.7c for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a mediaplayer action to index.php.

The post CVE-2008-2643 appeared first on CVE Vulnerability.

CVE-2008-1427

Sun, 26 Feb 2023 09:09:01 +0000

SQL injection vulnerability in the Joobi Acajoom (com_acajoom) 1.1.5 and 1.2.5 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the mailingid parameter in a mailing view action to index.php.

The post CVE-2008-1427 appeared first on CVE Vulnerability.

CVE-2008-0918

Sun, 26 Feb 2023 09:08:46 +0000

SQL injection vulnerability in includes/count_dl_or_link.inc.php in the astatsPRO (com_astatspro) 1.0.1 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to getfile.php, a different vector than CVE-2008-0839. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

The post CVE-2008-0918 appeared first on CVE Vulnerability.