CVSS: 9.8EPSS: 0%CPEs: 2EXPL: 3CVE-2010-4941 – Joomla! Component Teams - Multiple Blind SQL Injections
https://notcve.org/view.php?id=CVE-2010-4941
09 Oct 2011 — SQL injection vulnerability in the Teams (com_teams) component 1_1028_100809_1711 for Joomla! allows remote attackers to execute arbitrary SQL commands via the PlayerID parameter in a player save action to index.php. Vulnerabilidad de inyección SQL en el componente Teams (com_teams) v1_1028_100809_1711 para Joomla!, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro PlayerID en una acción "player save" sobre index.php. • https://www.exploit-db.com/exploits/14598 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 7.5EPSS: 3%CPEs: 2EXPL: 3CVE-2010-1315 – Joomla! Component webERPcustomer - Local File Inclusion
https://notcve.org/view.php?id=CVE-2010-1315
08 Apr 2010 — Directory traversal vulnerability in weberpcustomer.php in the webERPcustomer (com_weberpcustomer) component 1.2.1 and 1.x before 1.06.02 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php. NOTE: some of these details are obtained from third party information. Vulnerabilidad de salto de directorio en weberpcustomer.php en el componente webERPcustomer v1.2.1 y 1.x anterior a v1.06.02 para Joomla! • https://www.exploit-db.com/exploits/11999 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •
CVSS: 7.5EPSS: 1%CPEs: 2EXPL: 3CVE-2010-1304 – Joomla! Component User Status - Local File Inclusion
https://notcve.org/view.php?id=CVE-2010-1304
08 Apr 2010 — Directory traversal vulnerability in userstatus.php in the User Status (com_userstatus) component 1.21.16 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php. Vulnerabilidad de salto de directorio en userstatus.php en el componente User Status (com_userstatus) v1.21.16 para Joomla! permite a atacantes remotos leer archivos de su elección a través de .. • https://www.exploit-db.com/exploits/11998 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •
CVSS: 7.5EPSS: 8%CPEs: 2EXPL: 4CVE-2010-1305 – Joomla! Component JInventory 1.23.02 - Local File Inclusion
https://notcve.org/view.php?id=CVE-2010-1305
08 Apr 2010 — Directory traversal vulnerability in jinventory.php in the JInventory (com_jinventory) component 1.23.02 and possibly other versions before 1.26.03, a module for Joomla!, allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php. Vulnerabilidad de salto de directorio en el componente JInventory (com_jinventory) v1.23.02 y posiblemente versiones previas a la v1.26.03, para Joomla! permite a atacantes remotos leer archivos de su elección a través de .. • https://www.exploit-db.com/exploits/12065 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •
CVSS: 7.5EPSS: 5%CPEs: 2EXPL: 3CVE-2010-0982 – Joomla! Component com_cartweberp - Local File Inclusion
https://notcve.org/view.php?id=CVE-2010-0982
16 Mar 2010 — Directory traversal vulnerability in the CARTwebERP (com_cartweberp) component 1.56.75 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php. Vulnerabilidad de salto de directorio en el componente CARTwebERP (com_cartweberp)v1.56.75 para Joomla! permite a atacantes remotos leer archivos de su elección al utilizar caracteres .. • https://www.exploit-db.com/exploits/10942 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •