151 matches found
EUVD-2020-6166
Malware in sbrugna...
CVE-2015-6513
Multiple SQL injection vulnerabilities in the J2Store comj2store extension before 3.1.7 for Joomla! allow remote attackers to execute arbitrary SQL commands via the 1 sortby or 2 manufacturerids parameter to index.php...
Joomla J2Store SQL Injection
An SQL injection vulnerability exists in Joomla J2Store. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...
J2Store plugin SQL Injection Vulnerability
Joomla! is the U.S. Open Source Matters team using PHP and MySQL development of a set of open source , cross-platform content management system CMS. J2Store plugin is used in one of the e-commerce plug-ins . A SQL injection vulnerability exists in Joomla! J2Store plugin versions prior to 3.3.13...
CVE-2020-13996
The J2Store plugin before 3.3.13 for Joomla! allows a SQL injection attack by a trusted store manager...
CVE-2020-13996
The J2Store plugin before 3.3.13 for Joomla! allows a SQL injection attack by a trusted store manager...
Sql injection
The J2Store plugin before 3.3.13 for Joomla! allows a SQL injection attack by a trusted store manager...
CVE-2020-13996
The J2Store plugin before 3.3.13 for Joomla! allows a SQL injection attack by a trusted store manager...
CVE-2020-13996
The CVE concerns the J2Store Joomla! plugin prior to version 3.3.13. A SQL injection vulnerability exists in J2Store’s database handling due to lack of validation of externally supplied SQL statements, exploitable by a trusted store manager. Affected component: J2Store plugin (Joomla!) before 3.3...
CVE-2020-13996: Improper Neutralization of Special Elements used in an SQL Command
The J2Store plugin before 3.3.13 for Joomla! allows a SQL injection attack by a trusted store manager...
J2Store, 3.3.9. and previous,XSS (Cross Site Scripting)
J2Store,3.9.x,XSS Cross Site Scripting Update to 3.3.11 https://www.j2store.org/blog/general/j2store-3-3-11-released-with-improvements-and-a-security-fix.html...
Joomla J2Store SQL Injection
Exploit Title: J2Store Plugin for Joomla! 3.3.6 - SQL Injection Date: 19/02/2019 Author: Andrei Conache Twitter: @andreiconache Contact: andrei.conacheatprotonmail.com Software Link: https://www.j2store.org Version: 3.x-3.3.6 Tested on: Linux CVE: CVE-2019-9184 1. Description: J2Store is the most...
Joomla! Component J2Store < 3.3.7 - SQL Injection
Exploit Title: J2Store Plugin for Joomla! 3.3.6 - SQL Injection Date: 19/02/2019 Author: Andrei Conache Twitter: @andreiconache Contact: andrei.conacheatprotonmail.com Software Link: https://www.j2store.org Version: 3.x-3.3.6 Tested on: Linux CVE: CVE-2019-9184 1. Description: J2Store is the most...
Joomla! Component J2Store 3.3.7 - SQL Injection
Joomla! Component J2Store 3.3.7 - SQL Injection Exploit Title: J2Store Plugin for Joomla! 3.3.6 - SQL Injection Date: 19/02/2019 Author: Andrei Conache Twitter: @andreiconache Contact: andrei.conacheatprotonmail.com Software Link: https://www.j2store.org Version: 3.x-3.3.6 Tested on: Linux CVE:...
Joomla J2Store < 3.3.7 Component - SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: J2Store Plugin for Joomla! 3.3.6 - SQL Injection Author: Andrei Conache Twitter: @andreiconache Contact: andrei.conacheatprotonmail.com Software Link: https://www.j2store.org Version: 3.x-3.3.6 Tested on: Linux CVE: CVE-2019-918...
CVE-2019-9184
SQL injection vulnerability in the J2Store plugin 3.x before 3.3.7 for Joomla! allows remote attackers to execute arbitrary SQL commands via the productoption parameter...
Sql injection
SQL injection vulnerability in the J2Store plugin 3.x before 3.3.7 for Joomla! allows remote attackers to execute arbitrary SQL commands via the productoption parameter...
CVE-2019-9184
SQL injection vulnerability in the J2Store plugin 3.x before 3.3.7 for Joomla! allows remote attackers to execute arbitrary SQL commands via the productoption parameter...
CVE-2019-9184
CVE-2019-9184 affects the Joomla! J2Store plugin (versions prior to 3.3.7). The vulnerability is a SQL injection in the product_option[] parameter, allowing remote attackers to execute arbitrary SQL commands. Exploitation details in public reports reference the vulnerable parameter (product_optio...