EUVD-2020-15039

Malware in sbrugna...

CVE-2020-22274

JomSocial Joomla Social Network Extention 4.7.6 allows CSV injection via a customer's profile...

JomSocial , 4.7.6, XSS (Cross Site Scripting)

JomSocial , 4.7.6, XSS Cross Site Scripting investigation...

CVE-2020-22274

JomSocial Joomla Social Network Extention 4.7.6 allows CSV injection via a customer's profile...

CVE-2020-22274

JomSocial Joomla Social Network Extention 4.7.6 allows CSV injection via a customer's profile...

Design/Logic Flaw

JomSocial Joomla Social Network Extention 4.7.6 allows CSV injection via a customer's profile...

CVE-2020-22274

JomSocial Joomla Social Network Extention 4.7.6 allows CSV injection via a customer's profile...

CVE-2020-22274

CVE-2020-22274 affects JomSocial (Joomla Social Network Extention) 4.7.6, with a CSV injection flaw exploitable via a customer profile. The vulnerability’s root cause is CSV injection in the profile handling, and CVSS metrics indicate a HIGH/CRITICAL risk (CVSS v3.1: 9.8; network attack, no auth,...

PT-2020-15445

Name of the Vulnerable Software and Affected Versions JomSocial Joomla Social Network Extention version 4.7.6 Description The issue allows CSV injection via a customer's profile. Recommendations For JomSocial Joomla Social Network Extention version 4.7.6, consider restricting access to customer...

CVE-2020-22274: Improper Neutralization of Formula Elements in a CSV File

JomSocial Joomla Social Network Extention 4.7.6 allows CSV injection via a customer's profile...

Joomla JomSocial 4.7.6 Cross Site Scripting

Exploit Title: Joomla JomSocial 4.7.6 Stored XSS Date: 03.11.2020 Author: Vincent666 ibn Winnie Software Link: https://www.jomsocial.com/demo Tested on: Windows 10 Web Browser: Mozilla Firefox,Google Chrome and Edge :Google Dorks: inurl:templates/jomsocial/ Blog :...

Joomla Appointments for JomSocial 3.8.1 Component - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component Appointments for JomSocial v3.8.1 - SQL Injection Google Dork: N/A Date: 25.02.2017 Vendor Homepage: https://www.cmsplugin.com/ Software :...

Joomla JomSocial Component - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component JomSocial - SQL Injection Google Dork: N/A Date: 25.02.2017 Vendor Homepage: https://www.cmsplugin.com/ Software : http://extensions.cmsplugin.com/extensions/j3demo/jomsocial Demo:...

Joomla JomSocial SQL Injection

Exploit Title: Joomla! Component JomSocial - SQL Injection Google Dork: N/A Date: 25.02.2017 Vendor Homepage: https://www.cmsplugin.com/ Software : http://extensions.cmsplugin.com/extensions/j3demo/jomsocial Demo: http://extensions.cmsplugin.com/extensions/j3demo/jomsocial Version: N/A Tested on:...

Joomla Appointments For JomSocial 3.8.1 SQL Injection

Exploit Title: Joomla! Component Appointments for JomSocial v3.8.1 - SQL Injection Google Dork: N/A Date: 25.02.2017 Vendor Homepage: https://www.cmsplugin.com/ Software : https://www.cmsplugin.com/products/components/1-appointments-for-jomsocial Demo:...

Joomla! Component Appointments for JomSocial 3.8.1 - SQL Injection

Joomla! Component Appointments for JomSocial 3.8.1 - SQL Injection Exploit Title: Joomla! Component Appointments for JomSocial v3.8.1 - SQL Injection Google Dork: N/A Date: 25.02.2017 Vendor Homepage: https://www.cmsplugin.com/ Software :...

Joomla! Component JomSocial - SQL Injection

Joomla! Component JomSocial - SQL Injection Exploit Title: Joomla! Component JomSocial - SQL Injection Google Dork: N/A Date: 25.02.2017 Vendor Homepage: https://www.cmsplugin.com/ Software : http://extensions.cmsplugin.com/extensions/j3demo/jomsocial Demo:...

Joomla! Component JomSocial - SQL Injection

Exploit Title: Joomla! Component JomSocial - SQL Injection Google Dork: N/A Date: 25.02.2017 Vendor Homepage: https://www.cmsplugin.com/ Software : http://extensions.cmsplugin.com/extensions/j3demo/jomsocial Demo: http://extensions.cmsplugin.com/extensions/j3demo/jomsocial Version: N/A Tested on:...

Joomla JomSocial Component 2.6 - Code Execution Exploit

No description provided by source. !/usr/bin/python Joomla! JomSocial component = 2.6 PHP code execution exploit Authors: - Matias Fontanini - Gaston Traberg This exploit allows the execution of PHP code without any prior authentication on the Joomla! JomSocial component. Note that in order to be...

JomSocial 1.8.8 Shell Upload Vulnerability

No description provided by source. There is a file upload vulnerability in version 1.8.8 and earlier of JomSocial, the popular community extension for Joomla!. Successful exploitation of this exploit requires the site to be configured to allow users to upload video files directly, which is disabl...