CVE-2020-19450

SQL injection exists in the jdownloads 3.2.63 component for Joomla! via comjdownloads/helpers/jdownloadshelper.php, getUserLimits function in the list parameter...

CVE-2020-19450

SQL injection exists in the jdownloads 3.2.63 component for Joomla! via comjdownloads/helpers/jdownloadshelper.php, getUserLimits function in the list parameter...

Sql injection

SQL injection exists in the jdownloads 3.2.63 component for Joomla! via comjdownloads/helpers/jdownloadshelper.php, updateLog function via the X-forwarded-for Header parameter...

Sql injection

SQL injection exists in the jdownloads 3.2.63 component for Joomla! via comjdownloads/helpers/jdownloadshelper.php, getUserLimits function in the list parameter...

CVE-2020-19451

CVE-2020-19451 is a SQL injection in the Joomla! jdownloads 3.2.63 component, exploitable via com_jdownloads/helpers/jdownloadshelper.php in updateLog and triggered by the X-Forwarded-For header. Affected software is jdownloads 3.2.63 for Joomla!. The vulnerability is documented across NVD, Red H...

CVE-2020-19451

SQL injection exists in the jdownloads 3.2.63 component for Joomla! via comjdownloads/helpers/jdownloadshelper.php, updateLog function via the X-forwarded-for Header parameter...

CVE-2020-19450

CVE-2020-19450 affects Joomla! jdownloads 3.2.63. The vulnerability is a SQL injection in com_jdownloads/helpers/jdownloadshelper.php, in the getUserLimits function via the list parameter, caused by unsafe handling of user input. Impact is indicated as partial confidentiality compromise per CVSS2...

CVE-2020-19450

SQL injection exists in the jdownloads 3.2.63 component for Joomla! via comjdownloads/helpers/jdownloadshelper.php, getUserLimits function in the list parameter...

CVE-2020-19447

SQL injection exists in the jdownloads 3.2.63 component for Joomla! comjdownloads/models/send.php via the fmarkedfilesid parameter...

CVE-2020-19447

SQL injection exists in the jdownloads 3.2.63 component for Joomla! comjdownloads/models/send.php via the fmarkedfilesid parameter...

Sql injection

SQL injection exists in the jdownloads 3.2.63 component for Joomla! comjdownloads/models/send.php via the fmarkedfilesid parameter...

CVE-2020-19447

CVE-2020-19447 : The Joomla! ecosystem component jdownloads version 3.2.63 contains an SQL injection vulnerability in the com_jdownloads model file send.php, exploitable via the f_marked_files_id parameter. This description is sourced from multiple entries (NVD/Red Hat/CVE List) and confirms the ...

CVE-2020-19447

SQL injection exists in the jdownloads 3.2.63 component for Joomla! comjdownloads/models/send.php via the fmarkedfilesid parameter...

CVE-2020-25751

The paGO Commerce plugin 2.5.9.0 for Joomla! allows SQL Injection via the administrator/index.php?option=compago&view=comments filterpublished parameter...

CVE-2020-25751

The paGO Commerce plugin 2.5.9.0 for Joomla! allows SQL Injection via the administrator/index.php?option=compago&view=comments filterpublished parameter...

Sql injection

The paGO Commerce plugin 2.5.9.0 for Joomla! allows SQL Injection via the administrator/index.php?option=compago&view=comments filterpublished parameter...

CVE-2020-25751

The paGO Commerce plugin 2.5.9.0 for Joomla! allows SQL Injection via the administrator/index.php?option=compago&view=comments filterpublished parameter...

CVE-2020-25751

CVE-2020-25751 affects the paGO Commerce plugin 2.5.9.0 for Joomla!, enabling SQL Injection via the URL parameter administrator/index.php?option=com_pago&view=comments filter_published. NVD lists CVSS v3.1 base score 8.8 (HIGH) with NETWORK attack, LOW privileges, and no user interaction; impacts...

Joomla! paGO Commerce SQL Injection Vulnerability

Joomla! is an open source, cross-platform content management system CMS developed using PHP and MySQL. A SQL injection vulnerability exists in Joomla! paGO Commerce. An attacker can exploit the vulnerability to obtain sensitive database information...

Joomla! paGO Commerce 2.5.9.0 - SQL Injection (Authenticated)

Exploit Title: Joomla! paGO Commerce 2.5.9.0 - SQL Injection Authenticated Date: 2020-08-21 Exploit Author: Mehmet Kelepçe / Gais Cyber Security Author ID: 8763 Vendor Homepage: https://www.corephp.com/ Software Link: https://www.corephp.com/joomla-products/pago-commerce Version: 2.5.9.0 Tested o...