Saxum Astro, 4.0.14, SQL Injection

Saxum Astro, versions 4.0.14 and previous, SQL Injection...

CVE-2018-7180

SQL Injection exists in the Saxum Astro 4.0.14 component for Joomla! via the publicid parameter...

CVE-2018-7180

SQL Injection exists in the Saxum Astro 4.0.14 component for Joomla! via the publicid parameter...

Sql injection

SQL Injection exists in the Saxum Astro 4.0.14 component for Joomla! via the publicid parameter...

CVE-2018-7180

CVE-2018-7180 affects the Joomla! Saxum Astro component, version 4.0.14 (and earlier). The vulnerability is a SQL Injection via the publicid parameter in Saxum Astro 4.0.14. From the sources, the CVSS scores are 7.5 (CVSS2, HIGH) and 9.8 (CVSS3, CRITICAL). Public exploits/Poc exist (Exploit-DB en...

CVE-2018-7180

SQL Injection exists in the Saxum Astro 4.0.14 component for Joomla! via the publicid parameter...

Joomla Saxum Astro 4.0.14 Component - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component Saxum Astro 4.0.14 - SQL Injection Vendor Homepage: http://www.saxum2003.hu/ Software Link: https://extensions.joomla.org/extensions/extension/living/astrology-a-horoscope/saxumastro/ Software Download:...

Joomla! Saxum Astro 4.0.14 SQL Injection

Exploit Title: Joomla! Component Saxum Astro 4.0.14 - SQL Injection Dork: N/A Date: 16.02.2018 Vendor Homepage: http://www.saxum2003.hu/ Software Link: https://extensions.joomla.org/extensions/extension/living/astrology-a-horoscope/saxumastro/ Software Download:...

CVE-2018-7180: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in the Saxum Astro 4.0.14 component for Joomla! via the publicid parameter...

Joomla! Component Saxum Astro 4.0.14 - SQL Injection

Joomla! Component Saxum Astro 4.0.14 - SQL Injection Exploit Title: Joomla! Component Saxum Astro 4.0.14 - SQL Injection Dork: N/A Date: 16.02.2018 Vendor Homepage: http://www.saxum2003.hu/ Software Link: https://extensions.joomla.org/extensions/extension/living/astrology-a-horoscope/saxumastro/...

astro-direkt.com XSS vulnerability

Open Bug Bounty ID: OBB-375852 Description| Value ---|--- Affected Website:| astro-direkt.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

Astro GO - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Astro GO published at the 'play' market has multiple vulnerabilities...

Astro TV Channels - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Astro TV Channels published at the 'play' market has multiple vulnerabilities...

Horoscope - your astro future - Dangerous filesystem permissions, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Horoscope - your astro future published at the 'play' market has multiple vulnerabilities...

Astro Boy Flight! - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Astro Boy Flight! published at the 'play' market has multiple vulnerabilities...

Astro Music - Dynamic Code Loading, External URLs, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Astro Music published at the 'play' market has multiple vulnerabilities...

CVE-2014-5659

The ASTRO File Manager with Cloud aka com.metago.astro application ASTRO-4.4.592 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The ASTRO File Manager with Cloud aka com.metago.astro application ASTRO-4.4.592 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5659

The ASTRO File Manager with Cloud aka com.metago.astro application ASTRO-4.4.592 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5659

CVE-2014-5659 affects the Android app “ASTRO File Manager with Cloud” (package com.metago.astro), specifically version ASTRO-4.4.592. The root cause is that the app does not verify X.509 certificates from SSL servers, allowing a man-in-the-middle to spoof servers and access sensitive information ...