19384 matches found
CVE-2018-17375
CVE-2018-17375 affects the Joomla! extension Music Collection 3.0.3. The vulnerability is an SQL Injection in the id parameter of the Music Collection component, caused by unsanitized input in that parameter. Exploit details are available in public advisories (e.g., Exploit-DB and Packet Storm) s...
CVE-2018-17379
CVE-2018-17379 affects the Joomla! Raffle Factory 3.5.2 component, exposing a SQL Injection vulnerability via the filter_order_Dir and filter_order parameters. This allows an attacker to manipulate SQL queries, potentially impacting confidentiality, integrity, and availability (per CVSS metrics)....
CVE-2018-17378
SQL Injection exists in the Penny Auction Factory 2.0.4 component for Joomla! via the filterorderDir or filterorder parameter...
CVE-2018-17383
SQL Injection exists in the Collection Factory 4.1.9 component for Joomla! via the filterorder or filterorderDir parameter...
CVE-2018-17397
SQL Injection exists in the AlphaIndex Dictionaries 1.0 component for Joomla! via the letter parameter...
CVE-2018-17397
CVE-2018-17397 : The Joomla! component AlphaIndex Dictionaries 1.0 is vulnerable to SQL injection via the letter parameter in the application’s input handling (getArticlesPreview). Public references and exploits demonstrate attacker-controlled SQL can be injected, with CVSS scores indicating HIGH...
CVE-2018-17376
CVE-2018-17376 affects Joomla! Reverse Auction Factory 4.3.8; SQL injection via filter_order_Dir, cat, or filter_letter in listauctions. Public exploits exist (Exploit-DB) and the CVSS v3 base score is 9.8 (CRITICAL). No patch/version remediation details are provided in the supplied documents.
CVE-2018-17375
SQL Injection exists in the Music Collection 3.0.3 component for Joomla! via the id parameter...
CVE-2018-17384
SQL Injection exists in the Swap Factory 2.2.1 component for Joomla! via the filterorderDir or filterorder parameter...
CVE-2018-17384
CVE-2018-17384 affects Joomla! Swap Factory 2.2.1. The vulnerability is a SQL Injection in the Swap Factory component, exploitable via the filter_order_Dir and filter_order parameters, allowing an attacker to manipulate database queries. Root cause is unsafe handling of user input in the affected...
CVE-2018-17380
SQL Injection exists in the Article Factory Manager 4.3.9 component for Joomla! via the startdate, mstartdate, or menddate parameter...
CVE-2018-17383
CVE-2018-17383 concerns a SQL Injection in the Joomla! component “Collection Factory” version 4.1.9. The vulnerability is triggered via user-controllable inputs in the query path, specifically the parameters filter_order and filter_order_Dir , allowing an attacker to manipulate SQL commands execu...
CVE-2018-17382
SQL Injection exists in the Jobs Factory 2.0.4 component for Joomla! via the filterletter parameter...
CVE-2018-17382
CVE-2018-17382 affects Joomla! Jobs Factory 2.0.4 via SQL Injection in the filter_letter parameter. The vulnerability is confirmed by multiple sources (NVD entry and third-party advisories) and is rated high/critical (CVSS v2 base 7.5, CVSS v3 base 9.8). Exploit references exist (Exploit-DB, Pack...
CVE-2018-17394
SQL Injection exists in the Timetable Schedule 3.6.8 component for Joomla! via the eid parameter...
CVE-2018-17394
CVE-2018-17394 describes a SQL Injection in the Joomla! extension “Timetable Schedule” version 3.6.8 via the eid parameter of the timetable component. Multiple sources (NVD, CVE lists, exploit databases, and 0day resources) confirm a web-exposed injection vector with POC/exploits publicly referen...
CVE-2018-17380
CVE-2018-17380 affects Joomla! Article Factory Manager 4.3.9. The vulnerability is a SQL Injection in the Article Factory Manager component, exploitable via the start_date, m_start_date, or m_end_date parameters in the affected extension. Root cause: unsafely constructed SQL queries derived from ...
CVE-2018-17377
SQL Injection exists in the Questions 1.4.3 component for Joomla! via the term, userid, users, or groups parameter...
CVE-2018-17385
CVE-2018-17385 affects the Joomla! Social Factory 3.8.3 component. The vulnerability is a SQL Injection in the Social Factory radius search endpoint, exploitable via the radius[lat], radius[lng], or radius[radius] parameters. Public references (Packet Storm, Exploit-DB, CVE lists) describe a craf...