Search Results (Refine Search)

Search Parameters:
  • Results Type: Overview
  • Keyword (text search): Joomla
  • Search Type: Search All
There are 1,158 matching records.
Displaying matches 601 through 620.
Vuln ID Summary CVSS Severity
CVE-2010-1874

SQL injection vulnerability in the Real Estate Property (com_properties) component 3.1.22-03 for Joomla! allows remote attackers to execute arbitrary SQL commands via the aid parameter in an agentlisting action to index.php. NOTE: some of these details are obtained from third party information.

Published: May 12, 2010; 7:46:12 AM -0400
V3.x:(not available)
V2.0: 7.5 HIGH
CVE-2010-1873

SQL injection vulnerability in the Jvehicles (com_jvehicles) component 1.0, 2.0, and 2.1111 for Joomla! allows remote attackers to execute arbitrary SQL commands via the aid parameter in an agentlisting action to index.php. NOTE: some of these details are obtained from third party information.

Published: May 12, 2010; 7:46:12 AM -0400
V3.x:(not available)
V2.0: 7.5 HIGH
CVE-2010-1858

Directory traversal vulnerability in the SMEStorage (com_smestorage) component before 1.1 for Joomla! allows remote attackers to read arbitrary files via directory traversal sequences in the controller parameter to index.php.

Published: May 07, 2010; 4:30:01 PM -0400
V3.x:(not available)
V2.0: 5.0 MEDIUM
CVE-2010-1746

Multiple cross-site scripting (XSS) vulnerabilities in the Table JX (com_grid) component for Joomla! allow remote attackers to inject arbitrary web script or HTML via the (1) data_search and (2) rpp parameters to index.php.

Published: May 06, 2010; 2:30:00 PM -0400
V3.x:(not available)
V2.0: 4.3 MEDIUM
CVE-2010-1739

SQL injection vulnerability in the Newsfeeds (com_newsfeeds) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the feedid parameter in a categories action to index.php.

Published: May 06, 2010; 2:30:00 PM -0400
V3.x:(not available)
V2.0: 7.5 HIGH
CVE-2010-1723

Directory traversal vulnerability in the iNetLanka Contact Us Draw Root Map (com_drawroot) component 1.1 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php.

Published: May 04, 2010; 12:00:36 PM -0400
V3.x:(not available)
V2.0: 6.8 MEDIUM
CVE-2010-1722

Directory traversal vulnerability in the Online Market (com_market) component 2.x for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php.

Published: May 04, 2010; 12:00:36 PM -0400
V3.x:(not available)
V2.0: 6.8 MEDIUM
CVE-2010-1721

SQL injection vulnerability in the Intellectual Property (aka IProperty or com_iproperty) component 1.5.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in an agentproperties action to index.php.

Published: May 04, 2010; 12:00:36 PM -0400
V3.x:(not available)
V2.0: 7.5 HIGH
CVE-2010-1720

SQL injection vulnerability in the Q-Personel (com_qpersonel) component 1.0.2 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the katid parameter in a qpListele action to index.php.

Published: May 04, 2010; 12:00:36 PM -0400
V3.x:(not available)
V2.0: 7.5 HIGH
CVE-2010-1719

Directory traversal vulnerability in the MT Fire Eagle (com_mtfireeagle) component 1.2 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php.

Published: May 04, 2010; 12:00:36 PM -0400
V3.x:(not available)
V2.0: 6.8 MEDIUM
CVE-2010-1718

Directory traversal vulnerability in archeryscores.php in the Archery Scores (com_archeryscores) component 1.0.6 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the controller parameter to index.php.

Published: May 04, 2010; 12:00:36 PM -0400
V3.x:(not available)
V2.0: 6.8 MEDIUM
CVE-2010-1717

Directory traversal vulnerability in the iF surfALERT (com_if_surfalert) component 1.2 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php.

Published: May 04, 2010; 12:00:36 PM -0400
V3.x:(not available)
V2.0: 6.8 MEDIUM
CVE-2010-1716

SQL injection vulnerability in the Agenda Address Book (com_agenda) component 1.0.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action to index.php.

Published: May 04, 2010; 12:00:36 PM -0400
V3.x:(not available)
V2.0: 7.5 HIGH
CVE-2010-1715

Directory traversal vulnerability in the Online Examination (aka Online Exam or com_onlineexam) component 1.5.0 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php. NOTE: some of these details are obtained from third party information.

Published: May 04, 2010; 12:00:36 PM -0400
V3.x:(not available)
V2.0: 6.8 MEDIUM
CVE-2010-1714

Directory traversal vulnerability in the Arcade Games (com_arcadegames) component 1.0 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.

Published: May 04, 2010; 12:00:36 PM -0400
V3.x:(not available)
V2.0: 5.0 MEDIUM
CVE-2010-1659

Directory traversal vulnerability in the Ultimate Portfolio (com_ultimateportfolio) component 1.0 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.

Published: May 03, 2010; 9:51:53 AM -0400
V3.x:(not available)
V2.0: 5.0 MEDIUM
CVE-2010-1658

Directory traversal vulnerability in the Code-Garage NoticeBoard (com_noticeboard) component 1.3 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php.

Published: May 03, 2010; 9:51:53 AM -0400
V3.x:(not available)
V2.0: 5.0 MEDIUM
CVE-2010-1657

Directory traversal vulnerability in the SmartSite (com_smartsite) component 1.0.0 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.

Published: May 03, 2010; 9:51:53 AM -0400
V3.x:(not available)
V2.0: 5.0 MEDIUM
CVE-2010-1656

SQL injection vulnerability in the Airiny ABC (com_abc) component 1.1.7 for Joomla! allows remote attackers to execute arbitrary SQL commands via the sectionid parameter in an abc action to index.php.

Published: May 03, 2010; 9:51:53 AM -0400
V3.x:(not available)
V2.0: 7.5 HIGH
CVE-2010-1653

Directory traversal vulnerability in graphics.php in the Graphics (com_graphics) component 1.0.6 and 1.5.0 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the controller parameter to index.php. NOTE: some of these details are obtained from third party information.

Published: May 03, 2010; 9:51:53 AM -0400
V3.x:(not available)
V2.0: 7.5 HIGH