Att4Ckxt3Rr0R1St

The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `gid` parameter in the play.php file.

A cross-site request forgery (CSRF) issue exists, allowing remote attackers to hijack the authentication of administrators for requests that add an administrator via the N action. This occurs in the admin/conf users edit.php file.

The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `id` parameter in the "gallery.php" file.

A directory traversal issue exists, allowing remote attackers to read arbitrary local files. This is achieved by including a .. (dot dot) in the `controller` parameter to "index.php".

The issue allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the `controller` parameter to "index.php". This is a directory traversal vulnerability in the com rokdownloads component for Joomla!.

The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `cid` parameter in a "show" action, specifically targeting the index.php file.

The issue allows remote attackers to read arbitrary files via a .. (dot dot) in the `controller` parameter in a ccnewsletter action to "index.php". This is a directory traversal vulnerability.