CVE-2016-1000121

XSS and SQLi in Huge IT Joomla Slider v1.0.9 extension...

CVE-2016-1000121

XSS and SQLi in Huge IT Joomla Slider v1.0.9 extension...

CVE-2016-1000121

CVE-2016-1000121 affects the Huge IT Joomla Slider extension v1.0.9. The connected documents describe reflected XSS and SQL Injection vulnerabilities in the component, arising from inadequate input filtering in the extension’s admin code paths (notably in the slider manager and related PHP files)...

Huge IT Joomla Slider 1.0.9 XSS / SQL Injection

Title: Reflected XSS and SQLi in Huge IT Joomla Slider v1.0.9 extension Author: Larry W. Cashdollar, @larry0 Date: 2016-07-22 Download Site: http://extensions.joomla.org/extensions/extension/photos-a-images/slider Vendor: huge-it.com Vendor Notified: 2016-07-22 Vendor Contact: Description: Huge-I...