Sql injection

SQL Injection exists in the Reverse Auction Factory 4.3.8 component for Joomla! via the filterorderDir, cat, or filterletter parameter...

Sql injection

SQL Injection exists in the Questions 1.4.3 component for Joomla! via the term, userid, users, or groups parameter...

Sql injection

SQL Injection exists in the Music Collection 3.0.3 component for Joomla! via the id parameter...

Sql injection

SQL Injection exists in the Social Factory 3.8.3 component for Joomla! via the radiuslat, radiuslng, or radiusradius parameter...

Sql injection

SQL Injection exists in the Swap Factory 2.2.1 component for Joomla! via the filterorderDir or filterorder parameter...

Sql injection

SQL Injection exists in the Penny Auction Factory 2.0.4 component for Joomla! via the filterorderDir or filterorder parameter...

Sql injection

SQL Injection exists in the Timetable Schedule 3.6.8 component for Joomla! via the eid parameter...

Sql injection

SQL Injection exists in the Raffle Factory 3.5.2 component for Joomla! via the filterorderDir or filterorder parameter...

Sql injection

SQL Injection exists in the Article Factory Manager 4.3.9 component for Joomla! via the startdate, mstartdate, or menddate parameter...

Sql injection

SQL Injection exists in the Collection Factory 4.1.9 component for Joomla! via the filterorder or filterorderDir parameter...

Sql injection

SQL Injection exists in the Jobs Factory 2.0.4 component for Joomla! via the filterletter parameter...

Sql injection

SQL Injection exists in the AlphaIndex Dictionaries 1.0 component for Joomla! via the letter parameter...

CVE-2018-17375

CVE-2018-17375 affects the Joomla! extension Music Collection 3.0.3. The vulnerability is an SQL Injection in the id parameter of the Music Collection component, caused by unsanitized input in that parameter. Exploit details are available in public advisories (e.g., Exploit-DB and Packet Storm) s...

CVE-2018-17379

CVE-2018-17379 affects the Joomla! Raffle Factory 3.5.2 component, exposing a SQL Injection vulnerability via the filter_order_Dir and filter_order parameters. This allows an attacker to manipulate SQL queries, potentially impacting confidentiality, integrity, and availability (per CVSS metrics)....

CVE-2018-17378

SQL Injection exists in the Penny Auction Factory 2.0.4 component for Joomla! via the filterorderDir or filterorder parameter...

CVE-2018-17383

SQL Injection exists in the Collection Factory 4.1.9 component for Joomla! via the filterorder or filterorderDir parameter...

CVE-2018-17397

CVE-2018-17397 : The Joomla! component AlphaIndex Dictionaries 1.0 is vulnerable to SQL injection via the letter parameter in the application’s input handling (getArticlesPreview). Public references and exploits demonstrate attacker-controlled SQL can be injected, with CVSS scores indicating HIGH...

CVE-2018-17397

SQL Injection exists in the AlphaIndex Dictionaries 1.0 component for Joomla! via the letter parameter...

CVE-2018-17376

CVE-2018-17376 affects Joomla! Reverse Auction Factory 4.3.8; SQL injection via filter_order_Dir, cat, or filter_letter in listauctions. Public exploits exist (Exploit-DB) and the CVSS v3 base score is 9.8 (CRITICAL). No patch/version remediation details are provided in the supplied documents.

CVE-2018-17375

SQL Injection exists in the Music Collection 3.0.3 component for Joomla! via the id parameter...