Vulnerabilities (CVE)

Filtered by CWE-89
Total 14648 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-6228 1 Trendmicro 1 Email Encryption Gateway 2024-11-21 10.0 HIGH 9.8 CRITICAL
A SQL injection vulnerability in a Trend Micro Email Encryption Gateway 5.5 policy script could allow an attacker to execute SQL commands to upload and execute arbitrary code that may harm the target system.
CVE-2018-6024 1 Thethinkery 1 Project Log 2024-11-21 7.5 HIGH 9.8 CRITICAL
SQL Injection exists in the Project Log 1.5.3 component for Joomla! via the search parameter.
CVE-2018-6006 1 Joomsky 1 Js Autoz 2024-11-21 7.5 HIGH 9.8 CRITICAL
SQL Injection exists in the JS Autoz 1.0.9 component for Joomla! via the vtype, pre, or prs parameter.
CVE-2018-6005 1 Realpin Project 1 Realpin 2024-11-21 7.5 HIGH 9.8 CRITICAL
SQL Injection exists in the Realpin through 1.5.04 component for Joomla! via the pinboard parameter.
CVE-2018-6004 1 Techsolsystem 1 File Download Tracker 2024-11-21 7.5 HIGH 9.8 CRITICAL
SQL Injection exists in the File Download Tracker 3.0 component for Joomla! via the dynfield[phone] or sess parameter.
CVE-2018-5994 1 Joomsky 1 Js Jobs 2024-11-21 7.5 HIGH 9.8 CRITICAL
SQL Injection exists in the JS Jobs 1.1.9 component for Joomla! via the zipcode parameter in a newest-jobs request, or the ta parameter in a view_resume request.
CVE-2018-5993 1 Aist Project 1 Aist 2024-11-21 7.5 HIGH 9.8 CRITICAL
SQL Injection exists in the Aist through 2.0 component for Joomla! via the id parameter in a view=showvacancy request.
CVE-2018-5992 1 Staff Master Project 1 Staff Master 2024-11-21 7.5 HIGH 9.8 CRITICAL
SQL Injection exists in the Staff Master through 1.0 RC 1 component for Joomla! via the name parameter in a view=staff request.
CVE-2018-5991 1 Web-dorado 1 Form Maker 2024-11-21 7.5 HIGH 9.8 CRITICAL
SQL Injection exists in the Form Maker 3.6.12 component for Joomla! via the id, from, or to parameter in a view=stats request, a different vulnerability than CVE-2015-2798.
CVE-2018-5990 1 Allvideos Reloaded Project 1 Allvideos Reloaded 2024-11-21 7.5 HIGH 9.8 CRITICAL
SQL Injection exists in the AllVideos Reloaded 1.2.x component for Joomla! via the divid parameter.
CVE-2018-5989 1 Chillcreations 1 Ccnewsletter 2024-11-21 7.5 HIGH 9.8 CRITICAL
SQL Injection exists in the ccNewsletter 2.x component for Joomla! via the id parameter in a task=removeSubscriber action, a related issue to CVE-2011-5099.
CVE-2018-5988 1 Flexible Poll Project 1 Flexible Poll 2024-11-21 7.5 HIGH 9.8 CRITICAL
SQL Injection exists in Flexible Poll 1.2 via the id parameter to mobile_preview.php or index.php.
CVE-2018-5987 1 Social Pinboard Project 1 Social Pinboard 2024-11-21 7.5 HIGH 9.8 CRITICAL
SQL Injection exists in the Pinterest Clone Social Pinboard 2.0 component for Joomla! via the pin_id or user_id parameter in a task=getlikeinfo action, the ends parameter in a view=gift action, the category parameter in a view=home action, the uid parameter in a view=pindisplay action, the searchVal parameter in a view=search action, or the uid parameter in a view=likes action.
CVE-2018-5986 1 Easycarscript 1 Easycarscript 2024-11-21 7.5 HIGH 9.8 CRITICAL
SQL Injection exists in Easy Car Script 2014 via the s_order or s_row parameter to site_search.php.
CVE-2018-5985 1 Livecrm 1 Livecrm Saas Cloud 2024-11-21 7.5 HIGH 9.8 CRITICAL
SQL Injection exists in the LiveCRM SaaS Cloud 1.0 component for Joomla! via an r=site/login&company_id= request.
CVE-2018-5984 1 Tumder Project 1 Tumder 2024-11-21 7.5 HIGH 9.8 CRITICAL
SQL Injection exists in the Tumder (An Arcade Games Platform) 2.1 component for Joomla! via the PATH_INFO to the category/ URI.
CVE-2018-5983 1 Jquickcontact Project 1 Jquickcontact 2024-11-21 7.5 HIGH 9.8 CRITICAL
SQL Injection exists in the JquickContact 1.3.2.2.1 component for Joomla! via a task=refresh&sid= request.
CVE-2018-5982 1 Ordasoft 1 Advertisement Board 2024-11-21 7.5 HIGH 9.8 CRITICAL
SQL Injection exists in the Advertisement Board 3.1.0 component for Joomla! via a task=show_rss_categories&catname= request.
CVE-2018-5981 1 Web-dorado 1 Gallery Wd 2024-11-21 7.5 HIGH 9.8 CRITICAL
SQL Injection exists in the Gallery WD 1.3.6 component for Joomla! via the tag_id parameter or gallery_id parameter.
CVE-2018-5980 1 Solidres 1 Solidres 2024-11-21 7.5 HIGH 9.8 CRITICAL
SQL Injection exists in the Solidres 2.5.1 component for Joomla! via the direction parameter in a hub.search action.