301 matches found
JE CMS 1.1 - SQL Injection Vulnerability
No description provided by source...
Joomla Component JE Directorys <= (catparent) SQL injection Vulnerability
Joomla Component JE Directorys = catparent SQL injection Vulnerability Google Dork : index.php?option=comjedirectory http://target/index.php?option=comjedirectory&view=catparent&catparent=1//and//false//union//select//1,CHAR60,104,49,62,66,121,69,103,101,60,47,104,49,62,3,4,5-- Test url:...
Joomla JE Poll组件不明细节参数SQL注入漏洞
BUGTRAQ ID: 51229 CVECAN ID: CVE-2012-5101 Joomla!是一款开放源码的内容管理系统(CMS)。Joomla! JE Poll是Jommla 1.5、Joomla 1.6的一个组件、模块和插件,可将投票结果显示为动画。 Joomla JE Poll 1.1之前版本存在SQL注入漏洞,成功利用此漏洞可允许攻击者控制应用、访问或修改数据。 0 Joomla! JE Poll 1.0 厂商补丁: Joomla! ------- 目前厂商已经发布了升级补丁以修复这个安全问题,请到厂商的主页下载: http://www.joomla.org/...
CVE-2012-5230
Unspecified vulnerability in the JE Story Submit comjesubmit component before 1.9 for Joomla! has unknown impact and attack vectors...
Design/Logic Flaw
Unspecified vulnerability in the JE Story Submit comjesubmit component before 1.9 for Joomla! has unknown impact and attack vectors...
CVE-2012-5230
Unspecified vulnerability in the JE Story Submit comjesubmit component before 1.9 for Joomla! has unknown impact and attack vectors...
CVE-2012-5230
CVE-2012-5230 affects the Joomla! JE Story Submit (com_jesubmit) component prior to 1.9. The connected sources confirm an unspecified vulnerability with unknown impact and attack vectors, anchored by a CVSSv2 base score of 7.5 (HIGH). The affected item is specifically the com_jesubmit integration...
CVE-2012-5230
Unspecified vulnerability in the JE Story Submit comjesubmit component before 1.9 for Joomla! has unknown impact and attack vectors...
CVE-2012-5101
SQL injection vulnerability in the JExtensions JE Poll component before 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
Sql injection
SQL injection vulnerability in the JExtensions JE Poll component before 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2012-5101
The affected software is Joomla! JE Poll component (before version 1.1). It has an SQL injection vulnerability that can allow remote attackers to execute arbitrary SQL commands via unspecified vectors. The root cause is a flaw in JE Poll prior to 1.1 that enables injection and data access/modific...
CVE-2012-5101
SQL injection vulnerability in the JExtensions JE Poll component before 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
Joomla! Component JE Story Submit - 'index.php' Arbitrary File Upload
source: https://www.securityfocus.com/bid/51657/info The 'comjesubmit' component for Joomla! is prone to a vulnerability that lets attackers upload arbitrary files because the application fails to adequately sanitize user-supplied input. An attacker can exploit this vulnerability to upload...
Joomla! Component JE Story Submit - index.php Arbitrary File Upload
Joomla! Component JE Story Submit - index.php Arbitrary File Upload source: https://www.securityfocus.com/bid/51657/info The 'comjesubmit' component for Joomla! is prone to a vulnerability that lets attackers upload arbitrary files because the application fails to adequately sanitize user-supplie...
CVE-2010-5028
SQL injection vulnerability in the JExtensions JE Job comjejob component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in an item action to index.php...
CVE-2010-5022
SQL injection vulnerability in the JExtensions JE Story Submit comjesubmit component 1.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the view parameter to index.php...
Sql injection
SQL injection vulnerability in the JExtensions JE Job comjejob component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in an item action to index.php...
CVE-2010-5028
SQL injection vulnerability in the JExtensions JE Job comjejob component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in an item action to index.php...
Sql injection
SQL injection vulnerability in the JExtensions JE Story Submit comjesubmit component 1.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the view parameter to index.php...
CVE-2010-5022
SQL injection vulnerability in the JExtensions JE Story Submit comjesubmit component 1.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the view parameter to index.php...