rainbutterfly/cve_corpus huggingface dataset:
CVE-2010-4832 
Android OS before 2.2 does not display the correct SSL certificate in certain cases, which might allow remote attackers to spoof trusted web sites via a web page containing references to external sources in which (1) the certificate of the last loaded resource is checked, instead of for the main page, or (2) later certificates are not checked when the HTTPS connection is reused.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-05-14T00:00:00.000Z
CVE-2010-4833 
Untrusted search path vulnerability in modules/engines/ms-windows/xp_theme.c in GTK+ before 2.24.0 allows local users to gain privileges via a Trojan horse uxtheme.dll file in the current working directory, a different vulnerability than CVE-2010-4831.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-06T15:00:00.000Z
CVE-2010-4834 
Multiple SQL injection vulnerabilities in index.php in OneOrZero AIMS 2.6.0 Members Edition and 2.7.0 Trial Edition allow remote authenticated users to execute arbitrary SQL commands via the (1) id parameter in a saved_search action and (2) item_types parameter in a show_item_search action in the search_management_manage subcontroller. NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-13T21:00:00.000Z
CVE-2010-4835 
Directory traversal vulnerability in index.php in OneOrZero AIMS 2.6.0 Members Edition allows remote authenticated users to read arbitrary files via directory traversal sequences in the controller parameter in a show_report action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-13T21:00:00.000Z
CVE-2010-4836 
Cross-site scripting (XSS) vulnerability in register.html in PHPShop 2.1 EE and earlier allows remote attackers to inject arbitrary web script or HTML via the name_new parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-13T21:00:00.000Z
CVE-2010-4837 
Cross-site scripting (XSS) vulnerability in the JSupport (com_jsupport) component 1.5.6 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the subject parameter (title field) in a saveTicket action to index2.php.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-13T21:00:00.000Z
CVE-2010-4838 
SQL injection vulnerability in the JSupport (com_jsupport) component 1.5.6 for Joomla! allows remote authenticated users, with Public Back-end permissions, to execute arbitrary SQL commands via the alpha parameter in a (1) listTickets or (2) listFaqs action to administrator/index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-13T21:00:00.000Z
CVE-2010-4839 
SQL injection vulnerability in the Event Registration plugin 5.32 and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the event_id parameter in a register action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-13T21:00:00.000Z
CVE-2010-4840 
Multiple buffer overflows in the Syslog server in ManageEngine EventLog Analyzer 6.1 allow remote attackers to cause a denial of service (SysEvttCol.exe process crash) or possibly execute arbitrary code via a long Syslog PRI message header to UDP port (1) 513 or (2) 514. Fixed in 7.2 Build 7020.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-27T19:00:00.000Z
CVE-2010-4841 
Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine EventLog Analyzer 6.1 allow remote attackers to inject arbitrary web script or HTML via the (1) HOST_ID, (2) OS, (3) GROUP, (4) exportFile, (5) load, (6) type, or (7) tab parameter to INDEX.do, the (8) reported parameter to INDEX2.do, the (9) gId parameter to hostlist.do, the (10) newWindow parameter to globalSettings.do, or the (11) STATUS parameter to enableHost.do. Fixed in Build 9000.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-27T19:00:00.000Z
CVE-2010-4842 
SQL injection vulnerability in admin/login.php in MHP DownloadScript (aka MH Products Download Center) 2.2 allows remote attackers to execute arbitrary SQL commands via the Name parameter.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-27T10:00:00.000Z
CVE-2010-4843 
SQL injection vulnerability in website-page.php in PHP Web Scripts Ad Manager Pro 3.0 allows remote attackers to execute arbitrary SQL commands via the pageId parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-27T10:00:00.000Z
CVE-2010-4844 
SQL injection vulnerability in content.php in MH Products Easy Online Shop allows remote attackers to execute arbitrary SQL commands via the kat parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-27T10:00:00.000Z
CVE-2010-4845 
Multiple SQL injection vulnerabilities in MH Products Projekt Shop allow remote attackers to execute arbitrary SQL commands via the (1) ts parameter to details.php and possibly the (2) ilceler parameter to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-27T10:00:00.000Z
CVE-2010-4846 
SQL injection vulnerability in view_item.php in MH Products Pay Pal Shop Digital allows remote attackers to execute arbitrary SQL commands via the ItemID parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-27T10:00:00.000Z
CVE-2010-4847 
SQL injection vulnerability in view_item.php in MH Products MHP Downloadshop allows remote attackers to execute arbitrary SQL commands via the ItemID parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-27T10:00:00.000Z
CVE-2010-4848 
Multiple cross-site scripting (XSS) vulnerabilities in addlink.php in AXScripts AxsLinks 0.3 allow remote attackers to inject arbitrary web script or HTML via the (1) url or (2) title parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-27T10:00:00.000Z
CVE-2010-4849 
SQL injection vulnerability in countrydetails.php in Alibaba Clone B2B 3.4 allows remote attackers to execute arbitrary SQL commands via the es_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-27T10:00:00.000Z
CVE-2010-4850 
Multiple cross-site scripting (XSS) vulnerabilities in Diferior 8.03 allow remote attackers to inject arbitrary web script or HTML via the (1) post_content parameter to post/edit/2/p1.html, related to views/post.php; the (2) slogan parameter to admin/site/2.html, related to views/admin.php; or the (3) subcatname or (4) description parameter to admin/forum/create_sub.html, related to views/admin.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-27T10:00:00.000Z
CVE-2010-4851 
Multiple SQL injection vulnerabilities in Eclime 1.1.2b allow remote attackers to execute arbitrary SQL commands via the (1) ref or (2) poll_id parameter to index.php, or the (3) country parameter to create_account.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-27T10:00:00.000Z
CVE-2010-4852 
Cross-site scripting (XSS) vulnerability in login.php in Eclime 1.1.2b allows remote attackers to inject arbitrary web script or HTML via the reason parameter in a fail action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-09-27T10:00:00.000Z
CVE-2010-4853 
SQL injection vulnerability in the ccInvoices (com_ccinvoices) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a viewInv action to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-05T10:00:00.000Z
CVE-2010-4854 
SQL injection vulnerability in ajax/coupon.php in Zuitu 1.6, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter in a consume action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-05T10:00:00.000Z
CVE-2010-4855 
SQL injection vulnerability in oku.asp in xWeblog 2.2 allows remote attackers to execute arbitrary SQL commands via the makale_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-05T10:00:00.000Z
CVE-2010-4856 
SQL injection vulnerability in arsiv.asp in xWeblog 2.2 allows remote attackers to execute arbitrary SQL commands via the tarih parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-05T10:00:00.000Z
CVE-2010-4857 
SQL injection vulnerability in click.php in CAG CMS 0.2 Beta allows remote attackers to execute arbitrary SQL commands via the itemid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-05T10:00:00.000Z
CVE-2010-4858 
Directory traversal vulnerability in team.rc5-72.php in DNET Live-Stats 0.8 allows remote attackers to read arbitrary files via a .. (dot dot) in the showlang parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-05T10:00:00.000Z
CVE-2010-4859 
SQL injection vulnerability in index.php in WebAsyst Shop-Script allows remote attackers to execute arbitrary SQL commands via the blog_id parameter in a news action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-05T10:00:00.000Z
CVE-2010-4860 
SQL injection vulnerability in product_desc.php in MyPhpAuction 2010 allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-05T10:00:00.000Z
CVE-2010-4861 
SQL injection vulnerability in asearch.php in webSPELL 4.2.1 allows remote attackers to execute arbitrary SQL commands via the search parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-05T10:00:00.000Z
CVE-2010-4862 
SQL injection vulnerability in the JExtensions JE Directory (com_jedirectory) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in an item action to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-05T10:00:00.000Z
CVE-2010-4863 
Cross-site scripting (XSS) vulnerability in admin/changedata.php in GetSimple CMS 2.01 allows remote attackers to inject arbitrary web script or HTML via the post-title parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-05T10:00:00.000Z
CVE-2010-4864 
SQL injection vulnerability in the Club Manager (com_clubmanager) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the cm_id parameter in an equip presenta action to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-05T10:00:00.000Z
CVE-2010-4865 
SQL injection vulnerability in the JE Guestbook (com_jeguestbook) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the d_itemid parameter in an item_detail action to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-05T10:00:00.000Z
CVE-2010-4866 
SQL injection vulnerability in index.php in Chipmunk Board 1.3 allows remote attackers to execute arbitrary SQL commands via the forumID parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-05T10:00:00.000Z
CVE-2010-4867 
Directory traversal vulnerability in search.php3 (aka search.php) in W-Agora 4.2.1 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the bn parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-05T10:00:00.000Z
CVE-2010-4868 
Cross-site scripting (XSS) vulnerability in search.php3 (aka search.php) in W-Agora 4.2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the bn parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-05T10:00:00.000Z
CVE-2010-4869 
SQL injection vulnerability in index.php in DBHcms 1.1.4 allows remote attackers to execute arbitrary SQL commands via the editmenu parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-05T10:00:00.000Z
CVE-2010-4870 
SQL injection vulnerability in index.php in BloofoxCMS 0.3.5 allows remote attackers to execute arbitrary SQL commands via the gender parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-07T10:00:00.000Z
CVE-2010-4871 
Unspecified vulnerability in SmartFTP before 4.0 Build 1142 allows attackers to have an unknown impact via a long filename.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-07T10:00:00.000Z
CVE-2010-4872 
SQL injection vulnerability in newsroom.asp in ASPilot Pilot Cart 7.3 allows remote attackers to execute arbitrary SQL commands via the specific parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-07T10:00:00.000Z
CVE-2010-4873 
Cross-site scripting (XSS) vulnerability in confirm.php in WeBid 0.8.5 P1 allows remote attackers to inject arbitrary web script or HTML via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-07T10:00:00.000Z
CVE-2010-4874 
Multiple cross-site scripting (XSS) vulnerabilities in users.php in NinkoBB 1.3 RC5 allow remote attackers to inject arbitrary web script or HTML via the (1) first_name, (2) last_name, (3) msn, or (4) aim parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-07T10:00:00.000Z
CVE-2010-4875 
Cross-site scripting (XSS) vulnerability in vodpod-video-gallery/vodpod_gallery_thumbs.php in the Vodpod Video Gallery Plugin 3.1.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the gid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-07T10:00:00.000Z
CVE-2010-4876 
SQL injection vulnerability in viewpost.php in mBlogger 1.0.04 allows remote attackers to execute arbitrary SQL commands via the postID parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-07T10:00:00.000Z
CVE-2010-4877 
Cross-site scripting (XSS) vulnerability in index.php in OneCMS 2.6.1 allows remote attackers to inject arbitrary web script or HTML via the view parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-07T10:00:00.000Z
CVE-2010-4878 
PHP remote file inclusion vulnerability in formmailer.php in Kontakt Formular 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the script_pfad parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-07T10:00:00.000Z
CVE-2010-4879 
PHP remote file inclusion vulnerability in dompdf.php in dompdf 0.6.0 beta1 allows remote attackers to execute arbitrary PHP code via a URL in the input_file parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-07T10:00:00.000Z
CVE-2010-4880 
Multiple cross-site scripting (XSS) vulnerabilities in calendar.class.php in ApPHP Calendar (ApPHP CAL) allow remote attackers to inject arbitrary web script or HTML via the (1) category_name, (2) category_description, (3) event_name, or (4) event_description parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-07T10:00:00.000Z
CVE-2010-4881 
Multiple cross-site request forgery (CSRF) vulnerabilities in calendar.class.php in ApPHP Calendar (ApPHP CAL) allow remote attackers to hijack the authentication of unspecified victims for requests that use the (1) category_name, (2) category_description, (3) event_name, or (4) event_description parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-07T10:00:00.000Z
CVE-2010-4882 
Cross-site scripting (XSS) vulnerability in autocms.php in Auto CMS 1.6 allows remote attackers to inject arbitrary web script or HTML via the sitetitle parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-07T10:00:00.000Z
CVE-2010-4883 
Cross-site scripting (XSS) vulnerability in manager/index.php in MODx Revolution 2.0.2-pl allows remote attackers to inject arbitrary web script or HTML via the modhash parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-07T10:00:00.000Z
CVE-2010-4884 
PHP remote file inclusion vulnerability in guestbook/gbook.php in Gaestebuch 1.2 allows remote attackers to execute arbitrary PHP code via a URL in the script_pfad parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-07T10:00:00.000Z
CVE-2010-4885 
Cross-site scripting (XSS) vulnerability in the XING Button (xing) extension before 1.0.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-07T10:00:00.000Z
CVE-2010-4886 
Cross-site scripting (XSS) vulnerability in the "official twitter tweet button for your page" (tweetbutton) extension before 1.0.5 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-07T10:00:00.000Z
CVE-2010-4887 
SQL injection vulnerability in the Commenting system Backend Module (commentsbe) extension 0.0.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-07T10:00:00.000Z
CVE-2010-4888 
SQL injection vulnerability in the Tiny Market (hm_tinymarket) extension 0.5.4 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-07T10:00:00.000Z
CVE-2010-4889 
Unspecified vulnerability in the Tiny Market (hm_tinymarket) extension 0.5.4 and earlier for TYPO3 allows attackers to execute arbitrary code via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-07T10:00:00.000Z
CVE-2010-4890 
Cross-site scripting (XSS) vulnerability in the Yet Another Calendar (ke_yac) extension before 1.1.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-07T10:00:00.000Z
CVE-2010-4891 
SQL injection vulnerability in the Yet Another Calendar (ke_yac) extension before 1.1.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-07T10:00:00.000Z
CVE-2010-4892 
Cross-site scripting (XSS) vulnerability in the powermail extension before 1.5.5 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-07T10:00:00.000Z
CVE-2010-4893 
Cross-site scripting (XSS) vulnerability in foodvendors.php in FestOS 2.3b allows remote attackers to inject arbitrary web script or HTML via the category parameter in a details action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-08T10:00:00.000Z
CVE-2010-4894 
SQL injection vulnerability in core/showsite.php in chillyCMS 1.1.3 allows remote attackers to execute arbitrary SQL commands via the name parameter.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-08T10:00:00.000Z
CVE-2010-4895 
Cross-site scripting (XSS) vulnerability in core/showsite.php in chillyCMS 1.1.3 allows remote attackers to inject arbitrary web script or HTML via the name parameter (aka the username field).  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-08T10:00:00.000Z
CVE-2010-4896 
Cross-site scripting (XSS) vulnerability in admin/index.asp in Member Management System 4.0 allows remote attackers to inject arbitrary web script or HTML via the REF_URL parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-08T10:00:00.000Z
CVE-2010-4897 
SQL injection vulnerability in comment.php in BlueCMS 1.6 allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For HTTP header in a send action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-08T10:00:00.000Z
CVE-2010-4898 
SQL injection vulnerability in the Gantry (com_gantry) component 3.0.10 for Joomla! allows remote attackers to execute arbitrary SQL commands via the moduleid parameter to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-08T10:00:00.000Z
CVE-2010-4899 
SQL injection vulnerability in c.php in CMS WebManager-Pro before 8.1 allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-08T10:00:00.000Z
CVE-2010-4900 
Open redirect vulnerability in c.php in CMS WebManager-Pro 8.1 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-08T10:00:00.000Z
CVE-2010-4901 
Multiple cross-site scripting (XSS) vulnerabilities in char_map.php in MySource Matrix 3.28.3 allow remote attackers to inject arbitrary web script or HTML via the (1) height or (2) width parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-08T10:00:00.000Z
CVE-2010-4902 
Multiple SQL injection vulnerabilities in the Clantools (com_clantools) component 1.2.3 for Joomla! allow remote attackers to execute arbitrary SQL commands via the (1) squad or (2) showgame parameter to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-08T10:00:00.000Z
CVE-2010-4903 
SQL injection vulnerability in index.php in CubeCart 4.3.3 allows remote attackers to execute arbitrary SQL commands via the searchStr parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-08T10:00:00.000Z
CVE-2010-4904 
SQL injection vulnerability in the Aardvertiser (com_aardvertiser) component 2.1 and 2.1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the cat_name parameter in a view action to index.php.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-10-08T10:00:00.000Z