Exploits

    Dashboard / Exploits

    7.5
    High

    CVE-2010-5032

    Last Modified: 15 Dec 2016

    SQL injection vulnerability in the BF Quiz (com_bfquiztrial) component before 1.3.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a bfquiztrial action to index.php.

    Source:Valentin Hoebel
    Published:2 Nov 2011
    7.5
    High

    CVE-2010-5029

    Last Modified: 29 Jun 2010

    SQL injection vulnerability in index.php in Ecomat CMS 5.0 allows remote attackers to execute arbitrary SQL commands via the show parameter in a web action.

    Source:High-Tech Bridge SA
    Published:2 Nov 2011
    7.5
    High

    CVE-2010-5028

    Last Modified: 19 Dec 2016

    SQL injection vulnerability in the JExtensions JE Job (com_jejob) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in an item action to index.php.

    Source:v3n0m
    Published:2 Nov 2011
    4.3
    Medium

    CVE-2010-5027

    Last Modified: 11 Apr 2025

    Cross-site scripting (XSS) vulnerability in winners.php in Science Fair In A Box (SFIAB) 2.0.6 and 2.2.0 allows remote attackers to inject arbitrary web script or HTML via the type parameter. NOTE: some of these details are obtained from third party information.

    Source:L0rd CrusAd3r
    Published:2 Nov 2011
    6.8
    Medium

    CVE-2010-5026

    Last Modified: 11 Apr 2025

    SQL injection vulnerability in winners.php in Science Fair In A Box (SFIAB) 2.0.6 and 2.2.0 allows remote attackers to execute arbitrary SQL commands via the type parameter. NOTE: some of these details are obtained from third party information.

    Source:L0rd CrusAd3r
    Published:2 Nov 2011
    4.3
    Medium

    CVE-2010-5025

    Last Modified: 17 Jul 2014

    Cross-site scripting (XSS) vulnerability in manage/main.php in CuteSITE CMS 1.2.3 and 1.5.0 allows remote attackers to inject arbitrary web script or HTML via the fld_path parameter. NOTE: some of these details are obtained from third party information.

    Source:High-Tech Bridge SA
    Published:2 Nov 2011
    6
    Medium

    CVE-2010-5024

    Last Modified: 17 Jul 2014

    SQL injection vulnerability in manage/add_user.php in CuteSITE CMS 1.2.3 and 1.5.0 allows remote authenticated users, with Read privileges, to execute arbitrary SQL commands via the user_id parameter. NOTE: some of these details are obtained from third party information.

    Source:High-Tech Bridge SA
    Published:2 Nov 2011
    7.5
    High

    CVE-2010-5023

    Last Modified: 11 Apr 2025

    SQL injection vulnerability in index.asp in Digital Interchange Calendar 5.8.5 allows remote attackers to execute arbitrary SQL commands via the intDivisionID parameter.

    Source:L0rd CrusAd3r
    Published:2 Nov 2011
    7.5
    High

    CVE-2010-5022

    Last Modified: 20 Dec 2016

    SQL injection vulnerability in the JExtensions JE Story Submit (com_jesubmit) component 1.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the view parameter to index.php.

    Source:L0rd CrusAd3r
    Published:2 Nov 2011
    7.5
    High

    CVE-2010-5021

    Last Modified: 11 Apr 2025

    SQL injection vulnerability in view_group.asp in Digital Interchange Document Library 5.8.5 allows remote attackers to execute arbitrary SQL commands via the intGroupID parameter.

    Source:L0rd CrusAd3r
    Published:2 Nov 2011
    7.5
    High

    CVE-2010-5020

    Last Modified: 11 Apr 2025

    SQL injection vulnerability in index.php in NetArt Media iBoutique 4.0 allows remote attackers to execute arbitrary SQL commands via the page parameter.

    Source:L0rd CrusAd3r
    Published:2 Nov 2011
    7.5
    High

    CVE-2010-5019

    Last Modified: 11 Apr 2025

    SQL injection vulnerability in view_photo.php in 2daybiz Online Classified Script allows remote attackers to execute arbitrary SQL commands via the alb parameter.

    Source:Sid3^effects
    Published:2 Nov 2011
    4.3
    Medium

    CVE-2010-5018

    Last Modified: 11 Apr 2025

    Cross-site scripting (XSS) vulnerability in products/classified/headersearch.php in 2daybiz Online Classified Script allows remote attackers to inject arbitrary web script or HTML via the sid parameter.

    Source:Sid3^effects
    Published:2 Nov 2011
    7.5
    High

    CVE-2010-5017

    Last Modified: 11 Apr 2025

    SQL injection vulnerability in stats.php in Elite Gaming Ladders 3.0 allows remote attackers to execute arbitrary SQL commands via the account parameter.

    Source:Sora
    Published:2 Nov 2011
    7.5
    High

    CVE-2010-5016

    Last Modified: 11 Apr 2025

    SQL injection vulnerability in matchdb.php in Elite Gaming Ladders 3.5 and earlier allows remote attackers to execute arbitrary SQL commands via the match parameter.

    Source:Easy Laster
    Published:2 Nov 2011
    7.5
    High

    CVE-2010-5015

    Last Modified: 24 Jul 2014

    SQL injection vulnerability in view_photo.php in 2daybiz Network Community Script allows remote attackers to execute arbitrary SQL commands via the alb parameter.

    Source:Sid3^effects
    Published:2 Nov 2011
    7.5
    High

    CVE-2010-5014

    Last Modified: 12 Nov 2010

    SQL injection vulnerability in standings.php in Elite Gaming Ladders 3.5 allows remote attackers to execute arbitrary SQL commands via the ladder[id] parameter.

    Source:ahwak2000
    Published:2 Nov 2011
    7.5
    High

    CVE-2010-5013

    Last Modified: 11 Apr 2025

    SQL injection vulnerability in listing_detail.asp in Mckenzie Creations Virtual Real Estate Manager (VRM) 3.5 allows remote attackers to execute arbitrary SQL commands via the Lid parameter.

    Source:Sid3^effects
    Published:2 Nov 2011
    7.5
    High

    CVE-2010-5012

    Last Modified: 11 Apr 2025

    SQL injection vulnerability in new.php in DaLogin 2.2 and 2.2.5 allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: some of these details are obtained from third party information.

    Source:hc0
    Published:2 Nov 2011
    7.5
    High

    CVE-2010-5011

    Last Modified: 11 Apr 2025

    SQL injection vulnerability in schoolmv2/html/studentmain.php in SchoolMation 2.3 allows remote attackers to execute arbitrary SQL commands via the session parameter.

    Source:Sid3^effects
    Published:2 Nov 2011
    4.3
    Medium

    CVE-2010-5010

    Last Modified: 11 Apr 2025

    Cross-site scripting (XSS) vulnerability in schoolmv2/html/studentmain.php in SchoolMation 2.3 allows remote attackers to inject arbitrary web script or HTML via the session parameter.

    Source:Sid3^effects
    Published:2 Nov 2011
    7.5
    High

    CVE-2010-5009

    Last Modified: 11 Apr 2025

    SQL injection vulnerability in index.php in UTStats Beta 4 and earlier allows remote attackers to execute arbitrary SQL commands via the pid parameter in a matchp action.

    Source:LuM Member
    Published:2 Nov 2011
    7.5
    High

    CVE-2010-5008

    Last Modified: 11 Apr 2025

    SQL injection vulnerability in pages/contact_list_mail_form.asp in BrightSuite Groupware 5.4 allows remote attackers to execute arbitrary SQL commands via the ContactID parameter.

    Source:L0rd CrusAd3r
    Published:2 Nov 2011
    4.3
    Medium

    CVE-2010-5007

    Last Modified: 11 Apr 2025

    Cross-site scripting (XSS) vulnerability in pages/match_report.php in UTStats Beta 4 and earlier allows remote attackers to inject arbitrary web script or HTML via the mid parameter.

    Source:LuM Member
    Published:2 Nov 2011
    7.5
    High

    CVE-2010-5004

    Last Modified: 27 Jun 2010

    SQL injection vulnerability in searchvote.php in 2daybiz Polls (aka Advanced Poll) Script allows remote attackers to execute arbitrary SQL commands via the category parameter.

    Source:Easy Laster
    Published:2 Nov 2011
    7.5
    High

    CVE-2010-5003

    Last Modified: 15 Dec 2016

    SQL injection vulnerability in the AutarTimonial (com_autartimonial) component 1.0.8 for Joomla! allows remote attackers to execute arbitrary SQL commands via the limit parameter in an autartimonial action to index.php. NOTE: some of these details are obtained from third party information.

    Source:Sid3^effects
    Published:1 Nov 2011
    4.3
    Medium

    CVE-2010-5002

    Last Modified: 5 Aug 2014

    Cross-site scripting (XSS) vulnerability in modules/slideshowmodule/slideshow.js.php in Exponent CMS 0.97.0 allows remote attackers to inject arbitrary web script or HTML via the u parameter.

    Source:Andrei Rimsa Alvares
    Published:1 Nov 2011
    7.5
    High

    CVE-2010-5001

    Last Modified: 4 Jul 2010

    SQL injection vulnerability in view.php in esoftpro Online Contact Manager 3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.

    Source:L0rd CrusAd3r
    Published:1 Nov 2011
    7.5
    High

    CVE-2010-5000

    Last Modified: 11 Apr 2025

    SQL injection vulnerability in login/login_index.php in MCLogin System 1.1 and 1.2 allows remote attackers to execute arbitrary SQL commands via the myusername parameter (aka Username field) in a do_login action. NOTE: some of these details are obtained from third party information.

    Source:L0rd CrusAd3r
    Published:2 Nov 2011
    7.5
    High

    CVE-2010-4999

    Last Modified: 12 Jul 2015

    SQL injection vulnerability in index.php in esoftpro Online Photo Pro 2.0 allows remote attackers to execute arbitrary SQL commands via the section parameter.

    Source:L0rd CrusAd3r
    Published:1 Nov 2011
    7.5
    High

    CVE-2010-4998

    Last Modified: 11 Apr 2025

    PHP remote file inclusion vulnerability in ardeaCore/lib/core/ardeaInit.php in ardeaCore PHP Framework 2.2 allows remote attackers to execute arbitrary PHP code via a URL in the pathForArdeaCore parameter. NOTE: some of these details are obtained from third party information.

    Source:cr4wl3r
    Published:2 Nov 2011
    7.5
    High

    CVE-2010-4997

    Last Modified: 27 Jun 2010

    SQL injection vulnerability in index.php in OlyKit Swoopo Clone 2010 allows remote attackers to execute arbitrary SQL commands via the id parameter in a product action.

    Source:L0rd CrusAd3r
    Published:2 Nov 2011
    7.5
    High

    CVE-2010-4996

    Last Modified: 27 Oct 2016

    SQL injection vulnerability in ogp_show.php in esoftpro Online Guestbook Pro 5.1 allows remote attackers to execute arbitrary SQL commands via the search parameter.

    Source:Hussin X
    Published:1 Nov 2011
    7.5
    High

    CVE-2010-4995

    Last Modified: 19 Dec 2016

    SQL injection vulnerability in the NeoRecruit (com_neorecruit) component 1.6.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter in an offer_view action to index.php, a different vector than CVE-2007-4506.

    Source:Sid3^effects
    Published:1 Nov 2011
    7.5
    High

    CVE-2010-4993

    Last Modified: 19 Dec 2016

    SQL injection vulnerability in the eventcal (com_eventcal) component 1.6.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter to index.php.

    Source:RoAd_KiLlEr
    Published:1 Nov 2011
    7.5
    High

    CVE-2010-4992

    Last Modified: 3 Nov 2016

    SQL injection vulnerability in the Payments Plus component 2.1.5 for Joomla! allows remote attackers to execute arbitrary SQL commands via the type parameter to add.html.

    Source:Sid3^effects
    Published:1 Nov 2011
    7.5
    High

    CVE-2010-4991

    Last Modified: 19 Dec 2016

    SQL injection vulnerability in the NinjaMonials (com_ninjamonials) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter in a display action to index.php.

    Source:Sid3^effects
    Published:1 Nov 2011
    7.5
    High

    CVE-2010-4990

    Last Modified: 15 Dec 2016

    SQL injection vulnerability in the Front-edit Address Book (com_addressbook) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter in a contact action to index.php.

    Source:Sid3^effects
    Published:1 Nov 2011
    7.5
    High

    CVE-2010-4989

    Last Modified: 3 Jul 2010

    SQL injection vulnerability in main.asp in Ziggurat Farsi CMS allows remote attackers to execute arbitrary SQL commands via the grp parameter.

    Source:Arash Saadatfar
    Published:1 Nov 2011
    7.5
    High

    CVE-2010-4988

    Last Modified: 3 Jul 2010

    PHP remote file inclusion vulnerability in mod_chatting/themes/default/header.php in Family Connections Who is Chatting 2.2.3 allows remote attackers to execute arbitrary PHP code via a URL in the TMPL[path] parameter.

    Source:lumut--
    Published:1 Nov 2011
    7.5
    High

    CVE-2010-4987

    Last Modified: 8 Jul 2010

    SQL injection vulnerability in default.asp in KMSoft Guestbook (aka GBook) allows remote attackers to execute arbitrary SQL commands via the p parameter.

    Source:SONIC
    Published:1 Nov 2011
    7.5
    High

    CVE-2010-4986

    Last Modified: 30 Dec 2016

    SQL injection vulnerability in detail.php in Simple Document Management System (SDMS) allows remote attackers to execute arbitrary SQL commands via the doc_id parameter.

    Source:Sid3^effects
    Published:1 Nov 2011
    4.3
    Medium

    CVE-2010-4985

    Last Modified: 10 Jul 2010

    Cross-site scripting (XSS) vulnerability in notes.php in My Kazaam Notes Management System allows remote attackers to inject arbitrary web script or HTML via vectors involving the "Enter Reference Number Below" text box.

    Source:L0rd CrusAd3r
    Published:1 Nov 2011
    7.5
    High

    CVE-2010-4984

    Last Modified: 10 Jul 2010

    SQL injection vulnerability in notes.php in My Kazaam Notes Management System allows remote attackers to execute arbitrary SQL commands via vectors involving the "Enter Reference Number Below" text box.

    Source:L0rd CrusAd3r
    Published:1 Nov 2011
    7.5
    High

    CVE-2010-4983

    Last Modified: 2 Jul 2010

    SQL injection vulnerability in profile.php in iScripts CyberMatch 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.

    Source:Salvatore Fresta
    Published:1 Nov 2011
    7.5
    High

    CVE-2010-4982

    Last Modified: 10 Jul 2010

    SQL injection vulnerability in address_book/contacts.php in My Kazaam Address & Contact Organizer allows remote attackers to execute arbitrary SQL commands via the var1 parameter.

    Source:v3n0m
    Published:1 Nov 2011
    7.5
    High

    CVE-2010-4981

    Last Modified: 11 Apr 2025

    SQL injection vulnerability in trackads.php in YourFreeWorld Banner Management allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: some of these details are obtained from third party information.

    Source:L0rd CrusAd3r
    Published:1 Nov 2011
    7.5
    High

    CVE-2010-4980

    Last Modified: 3 Jul 2010

    SQL injection vulnerability in packagedetails.php in iScripts ReserveLogic 1.0 allows remote attackers to execute arbitrary SQL commands via the pid parameter.

    Source:Salvatore Fresta
    Published:1 Nov 2011
    7.5
    High

    CVE-2010-4979

    Last Modified: 31 Jul 2014

    SQL injection vulnerability in image/view.php in CANDID allows remote attackers to execute arbitrary SQL commands via the image_id parameter.

    Source:L0rd CrusAd3r
    Published:1 Nov 2011
    4.3
    Medium

    CVE-2010-4978

    Last Modified: 31 Jul 2014

    Cross-site scripting (XSS) vulnerability in image/view.php in CANDID allows remote attackers to inject arbitrary web script or HTML via the image_id parameter.

    Source:L0rd CrusAd3r
    Published:1 Nov 2011
    Items Per Page