Sql injection

SQL Injection exists in the Swap Factory 2.2.1 component for Joomla! via the filterorderDir or filterorder parameter...

Sql injection

SQL Injection exists in the Penny Auction Factory 2.0.4 component for Joomla! via the filterorderDir or filterorder parameter...

Sql injection

SQL Injection exists in the Raffle Factory 3.5.2 component for Joomla! via the filterorderDir or filterorder parameter...

Sql injection

SQL Injection exists in the Reverse Auction Factory 4.3.8 component for Joomla! via the filterorderDir, cat, or filterletter parameter...

PT-2018-14001

Name of the Vulnerable Software and Affected Versions Penny Auction Factory version 2.0.4 Description A SQL Injection issue exists in the Penny Auction Factory component for Joomla. The issue is related to the filter order Dir or filter order parameters. Recommendations For Penny Auction Factory...

CVE-2018-17376

SQL Injection exists in the Reverse Auction Factory 4.3.8 component for Joomla! via the filterorderDir, cat, or filterletter parameter...

CVE-2018-17383

SQL Injection exists in the Collection Factory 4.1.9 component for Joomla! via the filterorder or filterorderDir parameter...

CVE-2018-17384

SQL Injection exists in the Swap Factory 2.2.1 component for Joomla! via the filterorderDir or filterorder parameter...

CVE-2018-17378: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in the Penny Auction Factory 2.0.4 component for Joomla! via the filterorderDir or filterorder parameter...

CVE-2018-17380

CVE-2018-17380 affects Joomla! Article Factory Manager 4.3.9. The vulnerability is a SQL Injection in the Article Factory Manager component, exploitable via the start_date, m_start_date, or m_end_date parameters in the affected extension. Root cause: unsafely constructed SQL queries derived from ...

CVE-2018-17378

The CVE-2018-17378 entry describes a SQL injection vulnerability in Joomla! Penny Auction Factory 2.0.4, exploitable via the filter_order_Dir or filter_order parameters. Affected component: Penny Auction Factory 2.0.4 for Joomla!. Root cause: unsanitized user input in query construction leading t...

CVE-2018-17382: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in the Jobs Factory 2.0.4 component for Joomla! via the filterletter parameter...

CVE-2018-17379

CVE-2018-17379 affects the Joomla! Raffle Factory 3.5.2 component, exposing a SQL Injection vulnerability via the filter_order_Dir and filter_order parameters. This allows an attacker to manipulate SQL queries, potentially impacting confidentiality, integrity, and availability (per CVSS metrics)....

PT-2018-14004

Name of the Vulnerable Software and Affected Versions Article Factory Manager version 4.3.9 Description A SQL Injection issue exists in the Article Factory Manager component for Joomla, which can be exploited via the start date, m start date, or m end date parameter. Recommendations For Article...

CVE-2018-17376

CVE-2018-17376 affects Joomla! Reverse Auction Factory 4.3.8; SQL injection via filter_order_Dir, cat, or filter_letter in listauctions. Public exploits exist (Exploit-DB) and the CVSS v3 base score is 9.8 (CRITICAL). No patch/version remediation details are provided in the supplied documents.

CVE-2018-17382

CVE-2018-17382 affects Joomla! Jobs Factory 2.0.4 via SQL Injection in the filter_letter parameter. The vulnerability is confirmed by multiple sources (NVD entry and third-party advisories) and is rated high/critical (CVSS v2 base 7.5, CVSS v3 base 9.8). Exploit references exist (Exploit-DB, Pack...

CVE-2018-17378

SQL Injection exists in the Penny Auction Factory 2.0.4 component for Joomla! via the filterorderDir or filterorder parameter...

CVE-2018-17385

CVE-2018-17385 affects the Joomla! Social Factory 3.8.3 component. The vulnerability is a SQL Injection in the Social Factory radius search endpoint, exploitable via the radius[lat], radius[lng], or radius[radius] parameters. Public references (Packet Storm, Exploit-DB, CVE lists) describe a craf...

PT-2018-14005

Name of the Vulnerable Software and Affected Versions Jobs Factory version 2.0.4 Description A SQL Injection issue exists in the Jobs Factory component for Joomla!, which can be exploited via the filter letter parameter. Recommendations For version 2.0.4, update to a newer version that contains a...

CVE-2018-17380: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in the Article Factory Manager 4.3.9 component for Joomla! via the startdate, mstartdate, or menddate parameter...