Multiple SQL injection vulnerabilities in the DJ-Catalog (com_djcatalog) component for Joomla! allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in a showItem action and (2) cid parameter in a show action to index.php.
Search vulnerabilities
CVE-2009-3661
CVSS 2.0 · 6.8 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products
CVE-2010-5042
Cross-site scripting (XSS) vulnerability in the DJ-ArtGallery (com_djartgallery) component 0.9.1 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the cid[] parameter in an editItem action to administrator/index.php. NOTE: some of these details are obtained from third party information.
CVSS 2.0 · 4.3 Medium
EPSS 1.7%
KEV · Not listed
Vendors
Products
CVE-2010-5043
SQL injection vulnerability in the DJ-ArtGallery (com_djartgallery) component 0.9.1 for Joomla! allows remote authenticated users to execute arbitrary SQL commands via the cid[] parameter in an editItem action to administrator/index.php.
CVSS 2.0 · 6.0 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products
Page 1 of 1.