7050 matches found
CVE-2018-6006
The CVE-2018-6006 entry concerns a SQL Injection in the Joomla! extension JS Autoz (version 1.0.9) via the vtype, pre, or prs parameters. Vulnerable component: JS Autoz 1.0.9 for Joomla!, with root cause described as input handling allowing SQL injection. Impact per CVSS metrics is high/critical ...
CVE-2018-6006
SQL Injection exists in the JS Autoz 1.0.9 component for Joomla! via the vtype, pre, or prs parameter...
CVE-2018-5994
SQL Injection exists in the JS Jobs 1.1.9 component for Joomla! via the zipcode parameter in a newest-jobs request, or the ta parameter in a viewresume request...
CVE-2018-5994
CVE-2018-5994 affects Joomla! JS Jobs 1.1.9. SQL Injection via the zipcode parameter in newest-jobs requests or the ta parameter in view_resume requests. Public exploitation is documented (exploit-db). No remediation or patch/version details are provided in the supplied documents. CVSSv3.0 base s...
PT-2018-17289
Name of the Vulnerable Software and Affected Versions: Joomla! JS Autoz version 1.0.9 Description: A SQL Injection issue exists in the JS Autoz component for Joomla!, which can be exploited via the vtype, pre, or prs parameter. Recommendations: For Joomla! JS Autoz version 1.0.9, update to a newe...
CVE-2018-5994: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection exists in the JS Jobs 1.1.9 component for Joomla! via the zipcode parameter in a newest-jobs request, or the ta parameter in a viewresume request...
Joomla JS Jobs 1.1.9 Component - SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Joomla! Component JS Jobs 1.1.9 - SQL Injection Vendor Homepage: http://www.joomsky.com/ Software Link: https://extensions.joomla.org/extensions/extension/ads-a-affiliates/jobs-a-recruitment/js-jobs/ Software Download:...
Joomla! JS Autoz 1.0.9 SQL Injection
Exploit Title: Joomla! Component JS Autoz 1.0.9 - SQL Injection Dork: N/A Date: 16.02.2018 Vendor Homepage: http://www.joomsky.com/ Software Link: https://extensions.joomla.org/extensions/extension/vertical-markets/vehicles/js-autoz/ Software Download: http://joomsky.com/js-autoz-download.html...
CVE-2018-6006: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection exists in the JS Autoz 1.0.9 component for Joomla! via the vtype, pre, or prs parameter...
Joomla JS Autoz 1.0.9 Component - SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Joomla! Component JS Autoz 1.0.9 - SQL Injection Vendor Homepage: http://www.joomsky.com/ Software Link: https://extensions.joomla.org/extensions/extension/vertical-markets/vehicles/js-autoz/ Software Download:...
PT-2018-17280
Name of the Vulnerable Software and Affected Versions: Joomla! JS Jobs component version 1.1.9 Description: The issue exists due to SQL Injection in the JS Jobs component for Joomla!. This occurs via the zipcode parameter in a "newest-jobs" request, or the ta parameter in a "view resume" request...
Joomla! JS Jobs 1.1.9 SQL Injection
Exploit Title: Joomla! Component JS Jobs 1.1.9 - SQL Injection Dork: N/A Date: 16.02.2018 Vendor Homepage: http://www.joomsky.com/ Software Link: https://extensions.joomla.org/extensions/extension/ads-a-affiliates/jobs-a-recruitment/js-jobs/ Software Download:...
Joomla! Component JS Autoz 1.0.9 - SQL Injection
Joomla! Component JS Autoz 1.0.9 - SQL Injection Exploit Title: Joomla! Component JS Autoz 1.0.9 - SQL Injection Dork: N/A Date: 16.02.2018 Vendor Homepage: http://www.joomsky.com/ Software Link: https://extensions.joomla.org/extensions/extension/vertical-markets/vehicles/js-autoz/ Software...
Joomla! Component JS Jobs 1.1.9 - SQL Injection
Exploit Title: Joomla! Component JS Jobs 1.1.9 - SQL Injection Dork: N/A Date: 16.02.2018 Vendor Homepage: http://www.joomsky.com/ Software Link: https://extensions.joomla.org/extensions/extension/ads-a-affiliates/jobs-a-recruitment/js-jobs/ Software Download:...
Joomla! Component JS Autoz 1.0.9 - SQL Injection
Exploit Title: Joomla! Component JS Autoz 1.0.9 - SQL Injection Dork: N/A Date: 16.02.2018 Vendor Homepage: http://www.joomsky.com/ Software Link: https://extensions.joomla.org/extensions/extension/vertical-markets/vehicles/js-autoz/ Software Download: http://joomsky.com/js-autoz-download.html...
Zero-day vulnerability in Telegram
In October 2017, we learned of a vulnerability in Telegram Messenger's Windows client that was being exploited in the wild. It involves the use of a classic right-to-left override attack when a user sends files over the messenger service. Right-to-left override in a nutshell The special nonprinti...
PT-2018-17806 · WordPress · Bookly
Name of the Vulnerable Software and Affected Versions: Bookly 1 WordPress Booking Plugin Lite versions prior to 14.5 Description: The issue concerns a cross-site scripting XSS flaw. It is triggered by a jQuery.ajax request to the ng-payment details dialog.js file. Recommendations: For Bookly 1...
chakra: Crash in Js::JavascriptPromise::ResolveHelper
Project: https://github.com/Microsoft/ChakraCore.git Detailed report: https://oss-fuzz.com/testcase?key=4883765965881344 Project: chakra Fuzzer: jsfuzzer Job Type: asanchakra Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f2d885c84d8 Crash State: Js::JavascriptPromise::ResolveHelpe...
CVE-2017-1000509
Dolibarr 6.0.2 exposes a cross-site scripting (XSS) vulnerability in the Product details component, enabling execution of JavaScript. The issue is publicly documented across multiple feeds; maintainers indicate the fix is in version 7.0.0. No exploitation details are provided in the supplied docu...
