CVE-2018-7463

SQL injection vulnerability in files.php in the "files" component in ASANHAMAYESH CMS 3.4.6 allows a remote attacker to execute arbitrary SQL commands via the "id" parameter...

PT-2018-18082

Name of the Vulnerable Software and Affected Versions ASANHAMAYESH CMS version 3.4.6 Description A SQL injection issue exists in the files.php file of the "files" component, allowing a remote attacker to execute arbitrary SQL commands. The id parameter is vulnerable to this issue. Recommendations...

CVE-2018-7463: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in files.php in the "files" component in ASANHAMAYESH CMS 3.4.6 allows a remote attacker to execute arbitrary SQL commands via the "id" parameter...

CVE-2018-7476

controllers/admin/Linkage.php in dayrui FineCms 5.3.0 has Cross Site Scripting XSS via the id or lid parameter in a c=linkage,m=import request to admin.php, because the xssclean protection mechanism is defeated by crafted input that lacks a '' character...

CVE-2018-7179

SQL Injection exists in the SquadManagement 1.0.3 component for Joomla! via the id parameter...

CVE-2018-7179

SQL Injection exists in the SquadManagement 1.0.3 component for Joomla! via the id parameter...

Sql injection

SQL Injection exists in the SquadManagement 1.0.3 component for Joomla! via the id parameter...

CVE-2018-5991

SQL Injection exists in the Form Maker 3.6.12 component for Joomla! via the id, from, or to parameter in a view=stats request, a different vulnerability than CVE-2015-2798...

Sql injection

SQL Injection exists in the JomEstate PRO through 3.7 component for Joomla! via the id parameter in a task=detailed action...

Sql injection

SQL Injection exists in the MediaLibrary Free 4.0.12 component for Joomla! via the id parameter or the mid array parameter...

PT-2018-17279

Name of the Vulnerable Software and Affected Versions: Joomla! Aist component versions through 2.0 Description: A SQL Injection issue exists in the Aist component for Joomla! via the id parameter in a "view=showvacancy" request. Recommendations: For Joomla! Aist component versions through 2.0,...

PT-2018-17510

Name of the Vulnerable Software and Affected Versions JomEstate PRO versions through 3.7 Description A SQL Injection issue exists via the id parameter in a "task=detailed" action, allowing potential exploitation. Recommendations For JomEstate PRO versions through 3.7, avoid using the id parameter...

PT-2018-17257

Name of the Vulnerable Software and Affected Versions: MediaLibrary Free version 4.0.12 Description: A SQL Injection issue exists in the MediaLibrary Free component for Joomla!, which can be exploited via the id parameter or the mid array parameter. Recommendations: For MediaLibrary Free version...

CVE-2018-5993: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in the Aist through 2.0 component for Joomla! via the id parameter in a view=showvacancy request...

PT-2018-17935

Name of the Vulnerable Software and Affected Versions Joomla! SquadManagement version 1.0.3 Description A SQL Injection issue exists in the SquadManagement component for Joomla!, which can be exploited via the id parameter. Recommendations For Joomla! SquadManagement version 1.0.3, avoid using th...

Joomla Google Map Landkarten 4.2.3 Component - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component Google Map Landkarten = 4.2.3 - SQL Injection Vendor Homepage: http://www.joomla-24.de/ Software Link: https://extensions.joomla.org/extensions/extension/maps-a-weather/maps-a-locations/google-map-landkarten/...

CVE-2018-5971: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in the MediaLibrary Free 4.0.12 component for Joomla! via the id parameter or the mid array parameter...

CVE-2018-5989: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in the ccNewsletter 2.x component for Joomla! via the id parameter in a task=removeSubscriber action, a related issue to CVE-2011-5099...

PT-2018-17275

Name of the Vulnerable Software and Affected Versions: ccNewsletter versions 2.x Description: A SQL Injection issue exists in the ccNewsletter component for Joomla, specifically via the id parameter in a "task=removeSubscriber" action. Recommendations: For ccNewsletter versions 2.x, update to a...

CVE-2018-7179: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in the SquadManagement 1.0.3 component for Joomla! via the id parameter...