Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2010-4895 State: PUBLISHED Published: 2011-10-08T10:00:00 Last Updated: 2024-08-07T04:02:30.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in core/showsite.php in chillyCMS 1.1.3 allows remote attackers to inject arbitrary web script or HTML via the name parameter (aka the username field). NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.bugreport.ir/index_73.htm - http://www.exploit-db.com/exploits/14897 - http://securityreason.com/securityalert/8437 - http://www.osvdb.org/67835 - http://packetstormsecurity.org/1009-exploits/
ttp://securityreason.com/securityalert/8437 - http://www.osvdb.org/67835 - http://packetstormsecurity.org/1009-exploits/chillycms-sqlxss.txt - http://www.vupen.com/english/advisories/2010/2298 - http://www.securityfocus.com/bid/42991 - http://secunia.com/advisories/41313 - https://exchange.xforce.ibmcloud.com/vulnerabilities/61607
CVE ID: CVE-2010-4896 State: PUBLISHED Published: 2011-10-08T10:00:00 Last Updated: 2024-08-07T04:02:30.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin/index.asp in Member Management System 4.0 allows remote attackers to inject arbitrary web script or HTML via the REF_URL parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/61703 - http://pridels-team.blogspot.com/2010/09/member-management-system-v-40-xss-vuln.html - http://osvdb.org/67898 - http://secunia.com/advisories/41362 - http://www.securityfocus.com/bid/43109
CVE ID: CVE-2010-4897 State: PUBLISHED Published: 2011-10-08T10:00:00Z Last Updated: 2024-09-16T18:29:56.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in comment.php in BlueCMS 1.6 allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For HTTP header in a send action. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/67822 - http://secunia.com/advisories/41255 - http://bbs.wolvez.org/viewtopic.php?id=148
CVE ID: CVE-2010-4898 State: PUBLISHED Published: 2011-10-08T10:00:00Z Last Updated: 2024-09-16T17:38:13.114Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Gantry (com_gantry) component 3.0.10 for Joomla! allows remote attackers to execute arbitrary SQL commands via the moduleid parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/43017 - http://osvdb.org/67825 - http://www.exploit-db.com/exploits/14911 - http://secunia.com/advisories/41300 - http://www.gantry-framework.org/news/70-joomla-version-3011-released
CVE ID: CVE-2010-4899 State: PUBLISHED Published: 2011-10-08T10:00:00 Last Updated: 2024-08-07T04:02:30.453Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in c.php in CMS WebManager-Pro before 8.1 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/42951 - http://securityreason.com/securityalert/8438 - http://www.securityfocus.com/archive/1/513485/100/0/threaded - http://packetstormsecurity.org/1009-exploits/webmanagerpro-sql.txt - http://websecurity.com.ua/4146/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/61593
CVE ID: CVE-2010-4900 State: PUBLISHED Published: 2011-10-08T10:00:00 Last Updated: 2024-08-07T04:02:30.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in c.php in CMS WebManager-Pro 8.1 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/8438 - http://www.securityfocus.com/archive/1/513485/100/0/threaded - http://packetstormsecurity.org/1009-exploits/webmanagerpro-sql.txt - http://websecurity.com.ua/4146/
CVE ID: CVE-2010-4901 State: PUBLISHED Published: 2011-10-08T10:00:00 Last Updated: 2024-08-07T04:02:30.442Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in char_map.php in MySource Matrix 3.28.3 allow remote attackers to inject arbitrary web script or HTML via the (1) height or (2) width parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/43020 - http://securityreason.com/securityalert/8439 - http://secunia.com/advisories/41295 - http://www.zeroscience.mk/en/vulnerabilities/ZSL-2010-4962.php - http://osvdb.org/67838 - http://www.packetstormsecurity.org/1009-advisories/Z
.mk/en/vulnerabilities/ZSL-2010-4962.php - http://osvdb.org/67838 - http://www.packetstormsecurity.org/1009-advisories/ZSL-2010-4962.txt
CVE ID: CVE-2010-4902 State: PUBLISHED Published: 2011-10-08T10:00:00 Last Updated: 2024-08-07T04:02:30.444Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the Clantools (com_clantools) component 1.2.3 for Joomla! allow remote attackers to execute arbitrary SQL commands via the (1) squad or (2) showgame parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/41322 - http://packetstormsecurity.org/1009-exploits/joomlaclantools-sql.txt - http://www.securityfocus.com/bid/42986 - http://securityreason.com/securityalert/8440 - http://www.exploit-db.com/exploits/14902 - http://www.o
s.com/bid/42986 - http://securityreason.com/securityalert/8440 - http://www.exploit-db.com/exploits/14902 - http://www.osvdb.org/67827
CVE ID: CVE-2010-4903 State: PUBLISHED Published: 2011-10-08T10:00:00 Last Updated: 2024-08-07T04:02:30.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in CubeCart 4.3.3 allows remote attackers to execute arbitrary SQL commands via the searchStr parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/513572/100/0/threaded - http://www.acunetix.com/blog/web-security-zone/articles/sql-injection-xss-cubecart-4-3-3/ - http://secunia.com/advisories/41352 - http://securityreason.com/securityalert/8441 - http://www.securityfocus.com/bid/43114
CVE ID: CVE-2010-4904 State: PUBLISHED Published: 2011-10-08T10:00:00Z Last Updated: 2024-09-16T22:52:02.241Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Aardvertiser (com_aardvertiser) component 2.1 and 2.1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the cat_name parameter in a view action to index.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/43014 - http://secunia.com/advisories/41293 - http://www.vupen.com/english/advisories/2010/2310 - http://www.exploit-db.com/exploits/14922
CVE ID: CVE-2010-4905 State: PUBLISHED Published: 2011-10-08T10:00:00Z Last Updated: 2024-09-16T19:20:46.138Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in article_details.php in Softbiz Article Directory Script allows remote attackers to execute arbitrary SQL commands via the sbiz_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/14910 - http://osvdb.org/67826 - http://secunia.com/advisories/41301
CVE ID: CVE-2010-4906 State: PUBLISHED Published: 2011-10-08T10:00:00 Last Updated: 2024-08-07T04:02:30.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in zp-core/full-image.php in Zenphoto 1.3 and 1.3.1.2 allows remote attackers to execute arbitrary SQL commands via the a parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1009-exploits/zenphoto-sqlxss.txt - http://www.securityfocus.com/bid/43021 - http://www.securityfocus.com/archive/1/513525/100/0/threaded - http://secunia.com/advisories/41350 - http://www.acunetix.com/bl
www.securityfocus.com/archive/1/513525/100/0/threaded - http://secunia.com/advisories/41350 - http://www.acunetix.com/blog/web-security-zone/articles/zenphoto-13-advisory/ - http://securityreason.com/securityalert/8442
CVE ID: CVE-2010-4907 State: PUBLISHED Published: 2011-10-08T10:00:00 Last Updated: 2024-08-07T04:02:30.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in zp-core/admin.php in Zenphoto 1.3 allows remote attackers to inject arbitrary web script or HTML via the user parameter. NOTE: the from parameter is already covered by CVE-2009-4562. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/41342 - http://packetstormsecurity.org/1009-exploits/zenphoto-sqlxss.txt - http://www.securityfocus.com/bid/43021 - http://www.securityfocus.com/archive/1/513525/100/0/threaded - http://www.acunetix.com/blog/we
rityfocus.com/bid/43021 - http://www.securityfocus.com/archive/1/513525/100/0/threaded - http://www.acunetix.com/blog/web-security-zone/articles/zenphoto-13-advisory/ - http://securityreason.com/securityalert/8442
CVE ID: CVE-2010-4908 State: PUBLISHED Published: 2011-10-08T10:00:00 Last Updated: 2024-08-07T04:02:30.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in detail.php in Virtue Shopping Mall allows remote attackers to execute arbitrary SQL commands via the prodid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/43274 - http://packetstormsecurity.org/0908-exploits/vsm-sql.txt - http://securityreason.com/securityalert/8443 - http://secunia.com/advisories/35374 - https://exchange.xforce.ibmcloud.com/vulnerabilities/61875
CVE ID: CVE-2010-4909 State: PUBLISHED Published: 2011-10-08T10:00:00 Last Updated: 2024-08-07T04:02:30.487Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in PaysiteReviewCMS 1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) q parameter to search.php or the (2) image parameter to image.php. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/8444 - http://www.xenuser.org/documents/security/mechbunny_paysitereviewcms_xss.txt - http://packetstormsecurity.org/1009-exploits/mechbunnypsr-xss.txt - http://secunia.com/advisories/41431
CVE ID: CVE-2010-4910 State: PUBLISHED Published: 2011-10-08T10:00:00 Last Updated: 2024-08-07T04:02:30.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.cfm in ColdGen ColdCalendar 2.06 allows remote attackers to execute arbitrary SQL commands via the EventID parameter in a ViewEventDetails action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/61637 - http://securityreason.com/securityalert/8445 - http://packetstormsecurity.org/1009-exploits/coldcalendar-sql.txt - http://www.securityfocus.com/bid/43035 - http://secunia.com/advisories/41333 - http://www.exploit-db.com/ex
ar-sql.txt - http://www.securityfocus.com/bid/43035 - http://secunia.com/advisories/41333 - http://www.exploit-db.com/exploits/14932
CVE ID: CVE-2010-4911 State: PUBLISHED Published: 2011-10-08T10:00:00 Last Updated: 2024-08-07T04:02:30.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in classi/detail.php in PHP Classifieds Ads allows remote attackers to execute arbitrary SQL commands via the sid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1009-exploits/phpclassifiedsads-sql.txt - http://securityreason.com/securityalert/8447 - https://exchange.xforce.ibmcloud.com/vulnerabilities/61601 - http://www.exploit-db.com/exploits/14891
CVE ID: CVE-2010-4912 State: PUBLISHED Published: 2011-10-08T10:00:00 Last Updated: 2024-08-07T04:02:30.484Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in shop.php in UCenter Home 2.0 allows remote attackers to execute arbitrary SQL commands via the shopid parameter in a view action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/61783 - http://www.exploit-db.com/exploits/14997 - http://packetstormsecurity.org/1009-exploits/ucenter-sql.txt - http://securityreason.com/securityalert/8446
CVE ID: CVE-2010-4913 State: PUBLISHED Published: 2011-10-08T10:00:00 Last Updated: 2024-08-07T04:02:30.450Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the search feature in ColdGen ColdUserGroup 1.06 allows remote attackers to inject arbitrary web script or HTML via the Keywords parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/41335 - http://securityreason.com/securityalert/8448 - http://www.securityfocus.com/bid/43035 - http://www.exploit-db.com/exploits/14935 - http://packetstormsecurity.org/1009-exploit
www.securityfocus.com/bid/43035 - http://www.exploit-db.com/exploits/14935 - http://packetstormsecurity.org/1009-exploits/coldusergroup-sql.txt
CVE ID: CVE-2010-4914 State: PUBLISHED Published: 2011-10-08T10:00:00 Last Updated: 2024-08-07T04:02:30.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in tools/phpmailer/class.phpmailer.php in PHP Classifieds 7.3 allows remote attackers to execute arbitrary PHP code via a URL in the lang_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/14893 - https://exchange.xforce.ibmcloud.com/vulnerabilities/61603
CVE ID: CVE-2010-4915 State: PUBLISHED Published: 2011-10-08T10:00:00 Last Updated: 2024-08-07T04:02:30.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.cfm in ColdGen ColdBookmarks 1.22 allows remote attackers to execute arbitrary SQL commands via the BookmarkID parameter in an EditBookmark action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/41334 - http://www.exploit-db.com/exploits/14933 - http://www.securityfocus.com/bid/43035 - https://exchange.xforce.ibmcloud.com/vulnerabilities/61638 - http://securityreason.com/securityalert/8449 - http://packetstormsecurity.org/1009-exploits/coldboo
nerabilities/61638 - http://securityreason.com/securityalert/8449 - http://packetstormsecurity.org/1009-exploits/coldbookmarks-sql.txt
CVE ID: CVE-2010-4916 State: PUBLISHED Published: 2011-10-08T10:00:00 Last Updated: 2024-08-07T04:02:30.419Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in index.cfm in ColdGen ColdUserGroup 1.06 allow remote attackers to execute arbitrary SQL commands via the (1) ArticleID or (2) LibraryID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/41335 - http://securityreason.com/securityalert/8448 - http://www.securityfocus.com/bid/43035 - https://exchange.xforce.ibmcloud.com/vulnerabilities/61638 - http://www.exploit-db.com/exploits/14935 - http://packetstormsecurity.org/1009-exploits/col
.com/vulnerabilities/61638 - http://www.exploit-db.com/exploits/14935 - http://packetstormsecurity.org/1009-exploits/coldusergroup-sql.txt
CVE ID: CVE-2010-4917 State: PUBLISHED Published: 2011-10-08T10:00:00 Last Updated: 2024-08-07T04:02:30.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in sources/search.php in A-Blog 2.0 allows remote attackers to execute arbitrary SQL commands via the words parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/14894 - http://securityreason.com/securityalert/8450 - http://www.vupen.com/english/advisories/2010/2297 - http://www.securityfocus.com/bid/42988 - https://exchange.xforce.ibmcloud.com/vulnerabilities/61600 - http://packetstormsecurity.org/1009-exploits/ablog-sql.txt
CVE ID: CVE-2010-4918 State: PUBLISHED Published: 2011-10-08T10:00:00 Last Updated: 2024-08-07T04:02:30.502Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in iJoomla Magazine (com_magazine) component 3.0.1 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the config parameter to magazine.functions.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1009-exploits/ijoomlamagazine-rfi.txt - http://securityreason.com/securityalert/8451 - https://exchange.xforce.ibmcloud.com/vulnerabilities/61598 - http://www.exploit-db.com/exploits/14896
CVE ID: CVE-2010-4919 State: PUBLISHED Published: 2011-10-08T10:00:00 Last Updated: 2024-08-07T04:02:30.484Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in detail.asp in Micronetsoft RV Dealer Website 1.0 allows remote attackers to execute arbitrary SQL commands via the vehicletypeID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/14914 - https://exchange.xforce.ibmcloud.com/vulnerabilities/61611 - http://secunia.com/advisories/41319
CVE ID: CVE-2010-4920 State: PUBLISHED Published: 2011-10-08T10:00:00 Last Updated: 2024-08-07T04:02:30.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in detail.asp in Micronetsoft Rental Property Management Website 1.0 allows remote attackers to execute arbitrary SQL commands via the ad_ID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/41320 - http://www.exploit-db.com/exploits/14919 - https://exchange.xforce.ibmcloud.com/vulnerabilities/61619
CVE ID: CVE-2010-4921 State: PUBLISHED Published: 2011-10-08T10:00:00 Last Updated: 2024-08-07T04:02:30.454Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in inc_pollingboothmanager.asp in DMXReady Polling Booth Manager allows remote attackers to execute arbitrary SQL commands via the QuestionID parameter in a results action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/41306 - http://www.vupen.com/english/advisories/2010/2309 - http://www.exploit-db.com/exploits/14908 - http://securityreason.com/securityalert/8452 - http://www.securityfocus.com/bid/42990 - http://packetstormsecurity.org/1009-exploits/
tyreason.com/securityalert/8452 - http://www.securityfocus.com/bid/42990 - http://packetstormsecurity.org/1009-exploits/dmxreadypbm-sql.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/61608
CVE ID: CVE-2010-4922 State: PUBLISHED Published: 2011-10-09T10:00:00 Last Updated: 2024-08-07T04:02:30.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Allinta CMS 22.07.2010 allow remote attackers to execute arbitrary SQL commands via the i parameter in an edit action to (1) contentAE.asp or (2) templatesAE.asp. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/8453 - http://www.securityfocus.com/archive/1/512959/100/0/threaded - http://www.securityfocus.com/archive/1/512958 - http://www.htbridge.ch/advisory/sql_injection_vulnerability_in_allinta_cms.html - http://www.securityfoc
hive/1/512958 - http://www.htbridge.ch/advisory/sql_injection_vulnerability_in_allinta_cms.html - http://www.securityfocus.com/bid/42320 - http://www.htbridge.ch/advisory/sql_injection_vulnerability_in_allinta_cms_1.html
CVE ID: CVE-2010-4923 State: PUBLISHED Published: 2011-10-09T10:00:00 Last Updated: 2024-08-07T04:02:30.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in book/detail.php in Virtue Netz Virtue Book Store allows remote attackers to execute arbitrary SQL commands via the bid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/8460 - http://packetstormsecurity.org/0908-exploits/vbs-sql.txt - http://secunia.com/advisories/35375 - http://www.securityfocus.com/bid/43275
CVE ID: CVE-2010-4924 State: PUBLISHED Published: 2011-10-09T10:00:00Z Last Updated: 2024-09-17T02:46:49.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in logic/controller.class.php in clearBudget 0.9.8 allows remote attackers to execute arbitrary PHP code via a URL in the actionPath parameter. NOTE: this issue has been disputed by a reliable third party Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/14614 - http://attrition.org/pipermail/vim/2010-August/002388.html - http://www.securityfocus.com/bid/42351
CVE ID: CVE-2010-4925 State: PUBLISHED Published: 2011-10-09T10:00:00 Last Updated: 2024-08-07T04:02:30.500Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in clic.php in the Partenaires module 1.5 for Nuked-Klan allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/8459 - http://secunia.com/advisories/40887 - http://osvdb.org/66927 - http://packetstormsecurity.org/1008-exploits/nukedklanpartenaires-sql.txt - http://www.exploit-db.com/exploits/14556 - https://exchange.xforce.ibmcloud.com/vulnerabilities/60933
CVE ID: CVE-2010-4926 State: PUBLISHED Published: 2011-10-09T10:00:00 Last Updated: 2024-08-07T04:02:30.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the TimeTrack (com_timetrack) component 1.2.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the ct_id parameter in a timetrack action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1009-exploits/joomlatimetrack-sql.txt - http://securityreason.com/securityalert/8454 - http://timetrack.itrn.de/ - http://secunia.com/advisories/41583 - http://www.securityfocus.com/archive/1/513905/100/0/threaded - http://salvat
de/ - http://secunia.com/advisories/41583 - http://www.securityfocus.com/archive/1/513905/100/0/threaded - http://salvatorefresta.net/files/adv/TimeTrack_1.2.4_Joomla_Component_Multiple_SQL_Injection_Vulnerabilities-22092010.txt - http://www.exploit-db.com/exploits/15084
CVE ID: CVE-2010-4927 State: PUBLISHED Published: 2011-10-09T10:00:00 Last Updated: 2024-08-07T04:02:30.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Restaurant Guide (com_restaurantguide) component 1.0.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a country action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1009-exploits/joomlarestaurantguide-sqlxsslfi.txt - http://www.exploit-db.com/exploits/15040 - http://securityreason.com/securityalert/8458
CVE ID: CVE-2010-4928 State: PUBLISHED Published: 2011-10-09T10:00:00 Last Updated: 2024-08-07T04:02:30.490Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Restaurant Guide (com_restaurantguide) component 1.0.0 for Joomla! allows remote attackers to inject arbitrary web script or HTML by placing it after a > (greater than) character. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1009-exploits/joomlarestaurantguide-sqlxsslfi.txt - http://www.exploit-db.com/exploits/15040 - http://securityreason.com/securityalert/8458