Page 155 of 804 results (0.008 seconds)

CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0

CVE-2007-0387

https://notcve.org/view.php?id=CVE-2007-0387

SQL injection vulnerability in models/category.php in the Weblinks component for Joomla! SVN 20070118 (com_weblinks) allows remote attackers to execute arbitrary SQL commands via the catid parameter. Vulnerabilidad de inyección SQL en models/category.php en el componente Weblinks para Joomla! SVN 20070118 (com_weblinks) permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro catid. Joomla! • http://archives.neohapsis.com/archives/fulldisclosure/2007-01/0355.html http://osvdb.org/34792 http://www.hackers.ir/advisories/festival.txt http://www.securityfocus.com/archive/1/459203/100/0/threaded •

CVSS: 7.5EPSS: 0%CPEs: 11EXPL: 0

CVE-2006-6833

https://notcve.org/view.php?id=CVE-2006-6833

com_categories in Joomla! before 1.0.12 does not validate input, which has unknown impact and remote attack vectors. com_categories en Joomla! anterior a 1.0.12 no valida la entrada, lo cual tiene un impacto desconocido y ataques remotos en vectores. • http://jvn.jp/jp/JVN%2345006961/index.html http://secunia.com/advisories/23563 http://www.joomla.org/content/view/2495/78 http://www.securityfocus.com/bid/21810 http://www.vupen.com/english/advisories/2006/5202 •

CVSS: 6.8EPSS: 0%CPEs: 11EXPL: 0

CVE-2006-6834

https://notcve.org/view.php?id=CVE-2006-6834

Multiple unspecified vulnerabilities in Joomla! before 1.0.12 have unknown impact and attack vectors related to (1) "unneeded legacy functions" and (2) "Several low level security fixes." Mútiples vulnerabilidades no especificadas en Joomla! anterior a 1.0.12 tienen un impacto desconocido y ataca vectores relacionados con (1) "funciones innecesarias de herencia" y (2) "Varias soluciones de seguridad de nivel bajo." • http://jvn.jp/jp/JVN%2345006961/index.html http://secunia.com/advisories/23563 http://www.joomla.org/content/view/2446/1 http://www.joomla.org/content/view/2495/78 http://www.securityfocus.com/bid/21810 http://www.vupen.com/english/advisories/2006/5202 •

CVSS: 4.3EPSS: 0%CPEs: 11EXPL: 0

CVE-2006-6832

https://notcve.org/view.php?id=CVE-2006-6832

Cross-site scripting (XSS) vulnerability in Joomla! before 1.0.12 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly related to poll.php or the module title. Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Joomla! anterior a 1.0.12 permite a un atacante remoto inyectar secuencias de comandos web o HTML a través de vectores no especificados, posiblemente relacionados con poll.php o el módulo title. • http://forge.joomla.org/sf/go/artf5985?nav=1 http://forge.joomla.org/sf/go/artf6844?nav=1 http://jvn.jp/jp/JVN%2345006961/index.html http://secunia.com/advisories/23563 http://www.joomla.org/content/view/2495/78 http://www.securityfocus.com/bid/21810 http://www.vupen.com/english/advisories/2006/5202 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 6.8EPSS: 15%CPEs: 7EXPL: 2

CVE-2006-5048 – Mambo Component Security Images 3.0.5 - Remote File Inclusion

https://notcve.org/view.php?id=CVE-2006-5048

Multiple PHP remote file inclusion vulnerabilities in Security Images (com_securityimages) component 3.0.5 and earlier for Joomla! allow remote attackers to execute arbitrary code via a URL in the mosConfig_absolute_path parameter in (1) configinsert.php, (2) lang.php, (3) client.php, and (4) server.php. Vulnerabilidad no especificada en Security Images (com_securityimages) componente 3.0.5 y anteriores para Joomla! tiene un impacto no especificado y vectores de ataque, posiblemente vulnerabilidad PHP de inclusión remota de archivos en el parámetro mosConfig_absolute_path en configinsert.php, lang.php, client.php, y server.php. NOTA: el origen de esta información es desconocida; los detalles se obtuvieron de información de terceros. • https://www.exploit-db.com/exploits/2083 http://forum.joomla.org/index.php/topic%2C79477.0.html http://forum.joomla.org/index.php/topic%2C81589.0.html http://secunia.com/advisories/21260 http://www.osvdb.org/27655 http://www.osvdb.org/27656 http://www.osvdb.org/27657 http://www.osvdb.org/27658 http://www.securityfocus.com/bid/19217 http://www.vupen.com/english/advisories/2006/3062 https://exchange.xforce.ibmcloud.com/vulnerabilities/28078 • CWE-94: Improper Control of Generation of Code ('Code Injection') •