CVE-2010-1957

Directory traversal vulnerability in the Love Factory comlovefactory component 1.3.4 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php...

CVE-2010-1955

Affected software: Joomla! Deluxe Blog Factory component (com_blogfactory) version 1.1.2. Vulnerability: Local File Inclusion via a directory traversal (.. in the controller parameter to index.php), enabling reading arbitrary files. Root cause: improper handling of the controller parameter leadin...

CVE-2010-1955

Directory traversal vulnerability in the Deluxe Blog Factory comblogfactory component 1.1.2 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php...

CVE-2010-1956

Affected software: Joomla! Gadget Factory component (com_gadgetfactory) versions 1.0.0 and 1.5.0. Vulnerability: Local File Inclusion via directory traversal, allowing a remote attacker to read arbitrary files by supplying a .. (dot dot) in the controller parameter to index.php. Root cause: Insuf...

CVE-2010-1957

CVE-2010-1957 affects Joomla! component Love Factory (com_lovefactory) 1.3.4. A directory traversal flaw allows remote attackers to read arbitrary files by injecting a .. in the controller parameter to index.php, resulting in potential unauthorized file access. The Nuclei template confirms this a...

CVE-2010-1956: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the Gadget Factory comgadgetfactory component 1.0.0 and 1.5.0 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. NOTE: some of these details are obtained from third party information...

CVE-2010-1957: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the Love Factory comlovefactory component 1.3.4 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php...

CVE-2010-1955: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the Deluxe Blog Factory comblogfactory component 1.1.2 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php...

Joomla! Component Article Factory Manager - Arbitrary File Upload

Joomla! Component Article Factory Manager - Arbitrary File Upload vendor :http://www.thefactory.ro/shop/joomla-components/article-manager.html ooooo .oooooo. oooooo oooooo oooo 888' d8P' Y8b 888. 888. .8' 888 888 888. .8888. .8' 888 888 888 .8'888. .8' 888 888 888.8' 888.8' 888 88b ooo 888' 888'...

Joomla Component com_articleman Upload Vulnerability

Exploit for php platform in category web applications ==================================================== Joomla Component comarticleman Upload Vulnerability ==================================================== Description : Article Factory Manager is a very useful tool for any article driven...

Joomla! Component Article Factory Manager - Arbitrary File Upload

vendor :http://www.thefactory.ro/shop/joomla-components/article-manager.html ooooo .oooooo. oooooo oooooo oooo 888' d8P' Y8b 888. 888. .8' 888 888 888. .8888. .8' 888 888 888 .8'888. .8' 888 888 888.8' 888.8' 888 88b ooo 888' 888' o888o Y8bood8P' 8' 8'...

Digital Factory Publique! 2.3 - sid SQL Injection

Digital Factory Publique! 2.3 - sid SQL Injection source: https://www.securityfocus.com/bid/39988/info Publique! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker t...

CVE-2010-1600

SQL injection vulnerability in the Media Mall Factory commediamall component 1.0.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the category parameter to index.php...

Sql injection

SQL injection vulnerability in the Media Mall Factory commediamall component 1.0.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the category parameter to index.php...

CVE-2010-1600

CVE-2010-1600 affects the Joomla! Media Mall Factory (com_mediamall) component version 1.0.4, where an SQL injection via the category parameter to index.php allows remote SQL command execution. The connected documents confirm the affected product and root cause (unsanitized category parameter lea...

CVE-2010-1600: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Media Mall Factory commediamall component 1.0.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the category parameter to index.php...

Joomla Gadget Factory 1.0.0 Local File Inclusion

=================================================================================================================== o Joomla Component Gadget Factory Local File Inclusion Vulnerability Software : comgadgetfactory version 1.0.0 Vendor : http://www.thefactory.ro/ Author : AntiSecurity NoGe Vrs-hCk...

Joomla Component Gadget Factory com_gadgetfactory Local File Inclusion Vulnerability

No description provided by source. =================================================================================================================== o Joomla Component Gadget Factory Local File Inclusion Vulnerability Software : comgadgetfactory version 1.0.0 Vendor : http://www.thefactory.ro/...

Joomla! Component Gadget Factory 1.0.0 - Local File Inclusion

=================================================================================================================== o Joomla Component Gadget Factory Local File Inclusion Vulnerability Software : comgadgetfactory version 1.0.0 Vendor : http://www.thefactory.ro/ Author : AntiSecurity NoGe Vrs-hCk...

Joomla! Component Gadget Factory 1.0.0 - Local File Inclusion

Joomla! Component Gadget Factory 1.0.0 - Local File Inclusion =================================================================================================================== o Joomla Component Gadget Factory Local File Inclusion Vulnerability Software : comgadgetfactory version 1.0.0 Vendor :...