Improper handling of input variables lead to multiple path traversal vulnerabilities in the Admiror Gallery extension for Joomla in version branch 4.x.
SQL injection vulnerability in the GigCalendar (comgigcal) component 1.0 for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the gigcalgigsid parameter in a details action to index.php.
SQL injection vulnerability in the Simple Review (comsimplereview) component 1.3.5 for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the category parameter to index.php.
SQL injection vulnerability in the Phoca Documentation (comphocadocumentation) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a section action to index.php.
SQL injection vulnerability in the Portfol (comportfol) 1.2 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the vcatid parameter in a viewcategory action to index.php.
SQL injection vulnerability in the RD-Autos (comrdautos) 1.5.5 Stable component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php.
SQL injection vulnerability in the Eventing (comeventing) 1.6.x component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php.
SQL injection vulnerability in the Prince Clan Chess Club (compcchess) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the gameid parameter in a showgame action to index.php, a different vector than CVE-2008-0761.
SQL injection vulnerability in the beamospetition (combeamospetition) 1.0.12 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the mpid parameter in a sign action to index.php, a different vector than CVE-2008-3132.
SQL injection vulnerability in the BazaarBuilder Ecommerce Shopping Cart (comprod) 5.0 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the cid parameter in a products action to index.php.
DISPUTED SQL injection vulnerability in the Sigsiu Online Business Index 2 (SOBI2, comsobi2) RC 2.8.2 component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the bid parameter in a showbiz action to index.php, a different vector than CVE-2008-0607. NOTE: CVE disputes this issue, since neither "showbiz" nor "bid" appears in the source code for SOBI2.
SQL injection vulnerability in the ElearningForce Flash Magazine Deluxe (comflashmagazinedeluxe) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the magid parameter in a magazine action to index.php.
SQL injection vulnerability in the WebAmoeba (WA) Ticket System (comwaticketsystem) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a category action to index.php.
SQL injection vulnerability in the PcCookBook (compccookbook) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the recipeid parameter in a viewrecipe action to index.php, a different vector than CVE-2008-0844.
SQL injection vulnerability in MyAlbum component (commyalbum) 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the album parameter to index.php.
PHP remote file inclusion vulnerability in admin.googlebase.php in the Ecom Solutions VirtueMart Google Base (aka comgooglebase or Froogle) component 1.1 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter.
SQL injection vulnerability in the Versioning component (comversioning) 1.0.2 in Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the id parameter in an edit task to index.php.
SQL injection vulnerability in the PrayerCenter (comprayercenter) component 1.4.9 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a viewrequest action to index2.php.
SQL injection vulnerability in the MyContent (commycontent) component 1.1.13 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a view action to index.php.
PHP remote file inclusion vulnerability in lib/onguma.class.php in the Onguma Time Sheet (comongumatimesheet20) 2.0 4b component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter.
SQL injection vulnerability in the Volunteer Management System (comvolunteer) module 2.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the jobid parameter in a jobshow action to index.php.
SQL injection vulnerability in the commusica module in Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php.
PHP remote file inclusion vulnerability in config.dadamail.php in the Dada Mail Manager (comdadamail) component 2.6 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[mosConfigabsolutepath] parameter.
SQL injection vulnerability in the OwnBiblio (comownbiblio) component 1.5.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a catalogue action to index.php.
SQL injection vulnerability in the Mad4Joomla Mailforms (commad4joomla) component before 1.1.8.2 for Joomla! allows remote attackers to execute arbitrary SQL commands via the jid parameter to index.php.
SQL injection vulnerability in the KBase (comkbase) 1.2 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in an article action to index.php.
SQL injection vulnerability in the Live Ticker (comliveticker) module 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the tid parameter in a viewticker action to index.php.
SQL injection vulnerability in the mDigg (commdigg) component 2.2.8 for Joomla! allows remote attackers to execute arbitrary SQL commands via the cagtegory parameter in a storylists action to index.php.
SQL injection vulnerability in the EXtrovert Software Thyme (comthyme) 1.0 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the event parameter to index.php.
SQL injection vulnerability in the Joomtracker (comjoomtracker) 1.01 module for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a tordetails action to index.php.