CVE-2018-6368: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in the JomEstate PRO through 3.7 component for Joomla! via the id parameter in a task=detailed action...

CVE-2018-5991: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in the Form Maker 3.6.12 component for Joomla! via the id, from, or to parameter in a view=stats request, a different vulnerability than CVE-2015-2798...

ZhaiduMap SQL Injection Vulnerability (CNVD-2018-02954)

Joomla! is the U.S. Open Source Matters team developed a set of open source content management system CMS, the system provides RSS feeds , site search and other functions. Zh BaiduMap is used in one of the Baidu map component . A SQL injection vulnerability exists in version 3.0.0.1 of Joomla! A...

CVE-2018-6609

SQL Injection exists in the JSP Tickets 1.1 component for Joomla! via the ticketcode parameter in a ticketlist edit action, or the id parameter in a statuslist or prioritylist edit action...

CVE-2018-6582

SQL Injection exists in the Zh GoogleMap 8.4.0.0 component for Joomla! via the id parameter in a getPlacemarkDetails, getPlacemarkHoverText, getPathHoverText, or getPathDetails request...

Sql injection

SQL Injection exists in the Zh BaiduMap 3.0.0.1 component for Joomla! via the id parameter in a getPlacemarkDetails, getPlacemarkHoverText, getPathHoverText, or getPathDetails request...

CVE-2018-6604: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in the Zh YandexMap 6.2.1.0 component for Joomla! via the id parameter in a task=getPlacemarkDetails request...

CVE-2018-6605: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in the Zh BaiduMap 3.0.0.1 component for Joomla! via the id parameter in a getPlacemarkDetails, getPlacemarkHoverText, getPathHoverText, or getPathDetails request...

PT-2018-17646

Name of the Vulnerable Software and Affected Versions Joomla! Zh GoogleMap version 8.4.0.0 Description The issue exists due to SQL Injection in the Zh GoogleMap component for Joomla!. This occurs via the id parameter in specific requests, including "getPlacemarkDetails", "getPlacemarkHoverText",...

PT-2018-17663

Name of the Vulnerable Software and Affected Versions Joomla! component Zh YandexMap version 6.2.1.0 Description The issue exists due to SQL Injection in the Zh YandexMap component for Joomla!. This occurs via the id parameter in a "task=getPlacemarkDetails" request. Recommendations For version...

PT-2018-17664

Name of the Vulnerable Software and Affected Versions Joomla! Zh BaiduMap component version 3.0.0.1 Description The issue exists due to SQL Injection in the Zh BaiduMap component for Joomla!. This occurs via the id parameter in specific requests, including getPlacemarkDetails,...

CVE-2018-6582: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in the Zh GoogleMap 8.4.0.0 component for Joomla! via the id parameter in a getPlacemarkDetails, getPlacemarkHoverText, getPathHoverText, or getPathDetails request...

CVE-2018-6576

SQL Injection exists in Event Manager 1.0 via the event.php id parameter or the page.php slug parameter...

CVE-2018-6576: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in Event Manager 1.0 via the event.php id parameter or the page.php slug parameter...

Task Rabbit Clone SQL Injection Vulnerability

Task Rabbit Clone is a set of PHP-based scripts for online service marketplace websites. A SQL injection vulnerability exists in Task Rabbit Clone version 1.0. A remote attacker can inject SQL commands by sending the 'id' parameter to the singleblog.php file...

CVE-2018-6398

SQL Injection exists in the CP Event Calendar 3.0.1 component for Joomla! via the id parameter in a task=load action...

Sql injection

SQL Injection exists in the CP Event Calendar 3.0.1 component for Joomla! via the id parameter in a task=load action...

CVE-2018-6395

SQL Injection exists in the Visual Calendar 3.1.3 component for Joomla! via the id parameter in a view=load action...

PT-2018-17530

Name of the Vulnerable Software and Affected Versions Joomla! Visual Calendar version 3.1.3 Description A SQL Injection issue exists in the Visual Calendar component for Joomla!. This issue is exploitable via the id parameter in a "view=load" action. Recommendations For version 3.1.3, avoid using...

PT-2018-17533

Name of the Vulnerable Software and Affected Versions Joomla! CP Event Calendar version 3.0.1 Description A SQL Injection issue exists in the CP Event Calendar component for Joomla!. This issue is exploitable via the id parameter in a "task=load" action. Recommendations For version 3.0.1, avoid...