83 matches found
CVE-2020-5182
The J-BusinessDirectory extension before 5.2.9 for Joomla! allows Reverse Tabnabbing. In some configurations, the link to the business website can be entered by any user. If it doesn't contain rel="noopener" or similar attributes such as noreferrer, the tabnabbing may occur. To reproduce the bug,...
Design/Logic Flaw
The J-BusinessDirectory extension before 5.2.9 for Joomla! allows Reverse Tabnabbing. In some configurations, the link to the business website can be entered by any user. If it doesn't contain rel="noopener" or similar attributes such as noreferrer, the tabnabbing may occur. To reproduce the bug,...
CVE-2020-5182
The CVE-2020-5182 vulnerability affects the J-BusinessDirectory extension for Joomla! versions before 5.2.9. It enables Reverse Tabnabbing when a link to a business website is entered without rel="noopener" (or equivalent like noreferrer); a crafted link can exploit window.opener to redirect the ...
CVE-2020-5182
The J-BusinessDirectory extension before 5.2.9 for Joomla! allows Reverse Tabnabbing. In some configurations, the link to the business website can be entered by any user. If it doesn't contain rel="noopener" or similar attributes such as noreferrer, the tabnabbing may occur. To reproduce the bug,...
Joomla! J-BusinessDirectory 4.9.7 SQL Injection
Exploit Title: Joomla! Component J-BusinessDirectory 4.9.7 - SQL Injection Dork: N/A Date: 2019-01-23 Exploit Author: Ihsan Sencan Vendor Homepage: http://cmsjunkie.com/ Software Link: https://extensions.joomla.org/extensions/extension/directory-a-documentation/directory/j-businessdirectory/...
Joomla J-BusinessDirectory 4.9.7 Component - type SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Joomla! Component J-BusinessDirectory 4.9.7 - SQL Injection Exploit Author: Ihsan Sencan Vendor Homepage: http://cmsjunkie.com/ Software Link:...
Joomla! Component J-BusinessDirectory 4.9.7 - type SQL Injection
Joomla! Component J-BusinessDirectory 4.9.7 - type SQL Injection Exploit Title: Joomla! Component J-BusinessDirectory 4.9.7 - SQL Injection Dork: N/A Date: 2019-01-23 Exploit Author: Ihsan Sencan Vendor Homepage: http://cmsjunkie.com/ Software Link:...
Joomla! Component J-BusinessDirectory 4.9.7 - 'type' SQL Injection
Exploit Title: Joomla! Component J-BusinessDirectory 4.9.7 - SQL Injection Dork: N/A Date: 2019-01-23 Exploit Author: Ihsan Sencan Vendor Homepage: http://cmsjunkie.com/ Software Link: https://extensions.joomla.org/extensions/extension/directory-a-documentation/directory/j-businessdirectory/...
Joomla J-BusinessDirectory 4.7.3 SQL Injection Vulnerability
Exploit for php platform in category web applications Title: Joomla J-BusinessDirectory 4.7.3 -SQL injection Credit: Bilal KARDADOU Vendor: http://www.cmsjunkie.com/j-business-directory URL: https://extensions.joomla.org/extensions/extension/directory-a-documentation/directory/j-businessdirectory...
Joomla J-BusinessDirectory 4.7.3 SQL Injection
Title: Joomla J-BusinessDirectory 4.7.3 -SQL injection Credit: Bilal KARDADOU Vendor: http://www.cmsjunkie.com/j-business-directory URL: https://extensions.joomla.org/extensions/extension/directory-a-documentation/directory/j-businessdirectory/ Product: 'Joomla J-BusinessDirectory 4.7.3' Develope...
Joomla J-BusinessDirectory 4.6.8 SQL Injection
Exploit Title: Joomla! Component J-BusinessDirectory v4.6.8 - SQL Injection Google Dork: inurl:index.php?option=comjbusinessdirectory Date: 21.02.2017 Vendor Homepage: http://www.cmsjunkie.com/ Software Buy: http://www.cmsjunkie.com/ajax/index/options/productid/73/ Demo:...
Joomla! Component J-BusinessDirectory 4.6.8 - SQL Injection
Joomla! Component J-BusinessDirectory 4.6.8 - SQL Injection Exploit Title: Joomla! Component J-BusinessDirectory v4.6.8 - SQL Injection Google Dork: inurl:index.php?option=comjbusinessdirectory Date: 21.02.2017 Vendor Homepage: http://www.cmsjunkie.com/ Software Buy:...
Joomla J-BusinessDirectory 4.6.8 Component - SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Joomla! Component J-BusinessDirectory v4.6.8 - SQL Injection Google Dork: inurl:index.php?option=comjbusinessdirectory Date: 21.02.2017 Vendor Homepage: http://www.cmsjunkie.com/ Software Buy:...
Joomla! Component J-BusinessDirectory 4.6.8 - SQL Injection
Exploit Title: Joomla! Component J-BusinessDirectory v4.6.8 - SQL Injection Google Dork: inurl:index.php?option=comjbusinessdirectory Date: 21.02.2017 Vendor Homepage: http://www.cmsjunkie.com/ Software Buy: http://www.cmsjunkie.com/ajax/index/options/productid/73/ Demo:...
J-BusinessDirectory 4.5.4 and previous
J-BusinessDirectory 4.5.4 and previous sql injection resolution: update to 4.5.5 update notice: http://www.cmsjunkie.com/blog/joomlabusinessdirectory4-5-5release/...
australia-businessdirectory.com XSS vulnerability
Open Bug Bounty ID: OBB-62219 Description| Value ---|--- Affected Website:| australia-businessdirectory.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS...
idev-BusinessDirectory 3.0 Cross Site Request Forgery
Exploit Title: idev-BusinessDirectory 3.0 CSRF Author: Jonturk75 Vendor or Software Link: http://idevspot.com/ Category:: webapps Demo : http://idevspot.com/demos/idev-businessdirectory/admin Greetz: Inj3ct0r Exploit DataBase 1337day.com ShowShowHide...
idev-BusinessDirectory 3.0 CSRF Vulnerability
Exploit for php platform in category web applications...
CVE-2012-1779
Cross-site scripting XSS vulnerability in IDevSpot idev-BusinessDirectory 3.0 allows remote attackers to inject arbitrary web script or HTML via the SEARCH parameter to index.php...
Cross site scripting
Cross-site scripting XSS vulnerability in IDevSpot idev-BusinessDirectory 3.0 allows remote attackers to inject arbitrary web script or HTML via the SEARCH parameter to index.php...