109 matches found
CVE-2026-57994: Exposure of Sensitive Information to an Unauthorized Actor
phpMyFAQ before 4.1.5 applies inconsistent active=yes and publication-date filtering across its public FAQ API endpoints, allowing unauthenticated attackers to retrieve inactive draft or review-only FAQ content. Specifically, GET /api/v3.1/faq/categoryId/faqId returns the inactive FAQ title and...
EUVD-2018-21954
Joomla Component JE Photo Gallery 1.1 contains an SQL injection vulnerability that allows unauthenticated attackers to extract database information by injecting malicious SQL code through the categoryid parameter. Attackers can send GET requests to index.php with crafted categoryid values in the...
CVE-2018-25433
Joomla Component JE Photo Gallery 1.1 contains an SQL injection vulnerability that allows unauthenticated attackers to extract database information by injecting malicious SQL code through the categoryid parameter. Attackers can send GET requests to index.php with crafted categoryid values in the...
CVE-2018-25433 Joomla JE Photo Gallery 1.1 SQL Injection via categoryid
Joomla Component JE Photo Gallery 1.1 contains an SQL injection vulnerability that allows unauthenticated attackers to extract database information by injecting malicious SQL code through the categoryid parameter. Attackers can send GET requests to index.php with crafted categoryid values in the...
CVE-2018-25433
Technical details for CVE-2018-25433 are not publicly available in the provided documents. Monitor for updates.
CVE-2018-25433: Improper Neutralization of Special Elements used in an SQL Command
Joomla Component JE Photo Gallery 1.1 contains an SQL injection vulnerability that allows unauthenticated attackers to extract database information by injecting malicious SQL code through the categoryid parameter. Attackers can send GET requests to index.php with crafted categoryid values in the...
Joomla Component JE Photo Gallery SQL注入漏洞
The Joomla component JE Photo Gallery is an open-source Joomla image gallery component. Version 1.1 of the JE Photo Gallery has a SQL injection vulnerability. This vulnerability stems from the categoryid parameter, which allows for SQL injections. Unauthorized attackers could exploit this...
PT-2026-45624
Name of the Vulnerable Software and Affected Versions JE Photo Gallery version 1.1 Description An SQL injection allows unauthenticated attackers to extract database information by injecting malicious SQL code. Attackers can send GET requests to the 'index.php' endpoint within the 'com...
CVE-2022-23898
MCMS v5.2.5 was discovered to contain a SQL injection vulnerability via the categoryId parameter in the file IContentDao.xml...
EUVD-2007-3504
Malware in sbrugna...
EUVD-2010-2067
Malware in sbrugna...
EUVD-2021-11760
Malware in sbrugna...
EUVD-2018-17738
Malware in sbrugna...
EUVD-2013-4958
Malware in sbrugna...
EUVD-2009-4327
Malware in sbrugna...
EUVD-2008-2758
Malware in sbrugna...
EUVD-2008-1348
Malware in sbrugna...
EUVD-2006-6130
Malware in sbrugna...