CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 5CVE-2010-4945 – Joomla! Component CamelcityDB 2.2 - SQL Injection
https://notcve.org/view.php?id=CVE-2010-4945
SQL injection vulnerability in the CamelcityDB (com_camelcitydb2) component 2.2 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php. Vulnerabilidad de inyección SQL en el componente para Joomla! CamelcityDB (com_camelcitydb2) v2.2, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id sobre index.html. • https://www.exploit-db.com/exploits/14530 http://packetstormsecurity.org/0901-exploits/joomlacamel-sql.txt http://packetstormsecurity.org/1008-exploits/joomlacamelcitydb2-sql.txt http://securityreason.com/securityalert/8465 http://www.exploit-db.com/exploits/14530 http://www.securityfocus.com/bid/33254 https://exchange.xforce.ibmcloud.com/vulnerabilities/60860 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 2CVE-2010-4938 – Joomla! Component Weblinks - 'Itemid' SQL Injection
https://notcve.org/view.php?id=CVE-2010-4938
SQL injection vulnerability in the Weblinks (com_weblinks) component in Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter in a categories action to index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Vulnerabilidad de inyección SQL en el componente Weblinks (com_weblinks) , permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro Itemid en una acción categorías para index.php. NOTA: la procedencia de esta información es desconocida, los detalles son obtenidos exclusivamente de la información de terceros. • https://www.exploit-db.com/exploits/34475 http://www.securityfocus.com/bid/42455 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 2CVE-2010-4936
https://notcve.org/view.php?id=CVE-2010-4936
SQL injection vulnerability in the Slide Show (com_slideshow) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php. Vulnerabilidad de inyección SQL en el componente Slide Show (com_slideshow) para Joomla! y anteriores, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro catid de index.php. • http://packetstormsecurity.org/1008-exploits/joomlaslideshow-sql.txt http://securityreason.com/securityalert/8461 http://www.securityfocus.com/bid/42427 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 7.5EPSS: 0%CPEs: 3EXPL: 2CVE-2010-4944 – Joomla! Component Elite Experts - SQL Injection
https://notcve.org/view.php?id=CVE-2010-4944
SQL injection vulnerability in the Elite Experts (com_elite_experts) component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a showExpertProfileDetailed action to index.php. Vulnerabilidad de inyección SQL en el componente Elite Experts (com_elite_experts) para Mambo y Joomla!, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id en una acción showExpertProfileDetailed a index.php • https://www.exploit-db.com/exploits/15100 http://www.exploit-db.com/exploits/15100 https://exchange.xforce.ibmcloud.com/vulnerabilities/62010 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 3CVE-2010-4941 – Joomla! Component Teams - Multiple Blind SQL Injections
https://notcve.org/view.php?id=CVE-2010-4941
SQL injection vulnerability in the Teams (com_teams) component 1_1028_100809_1711 for Joomla! allows remote attackers to execute arbitrary SQL commands via the PlayerID parameter in a player save action to index.php. Vulnerabilidad de inyección SQL en el componente Teams (com_teams) v1_1028_100809_1711 para Joomla!, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro PlayerID en una acción "player save" sobre index.php. • https://www.exploit-db.com/exploits/14598 http://adv.salvatorefresta.net/Teams_1_1028_100809_1711_Joomla_Component_Multiple_Blind_SQL_Injection_Vulnerabilities-10082010.txt http://secunia.com/advisories/40933 http://securityreason.com/securityalert/8463 http://www.exploit-db.com/exploits/14598 http://www.securityfocus.com/archive/1/512974/100/0/threaded • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •