19614 matches found
Sql injection
SQL Injection exists in the Questions 1.4.3 component for Joomla! via the term, userid, users, or groups parameter...
Sql injection
SQL Injection exists in the Penny Auction Factory 2.0.4 component for Joomla! via the filterorderDir or filterorder parameter...
Sql injection
SQL Injection exists in the Timetable Schedule 3.6.8 component for Joomla! via the eid parameter...
Sql injection
SQL Injection exists in the Music Collection 3.0.3 component for Joomla! via the id parameter...
Sql injection
SQL Injection exists in the Swap Factory 2.2.1 component for Joomla! via the filterorderDir or filterorder parameter...
Sql injection
SQL Injection exists in the Article Factory Manager 4.3.9 component for Joomla! via the startdate, mstartdate, or menddate parameter...
Sql injection
SQL Injection exists in the Jobs Factory 2.0.4 component for Joomla! via the filterletter parameter...
Sql injection
SQL Injection exists in the Raffle Factory 3.5.2 component for Joomla! via the filterorderDir or filterorder parameter...
Sql injection
SQL Injection exists in the Collection Factory 4.1.9 component for Joomla! via the filterorder or filterorderDir parameter...
Sql injection
SQL Injection exists in the AlphaIndex Dictionaries 1.0 component for Joomla! via the letter parameter...
CVE-2018-17375
CVE-2018-17375 affects the Joomla! extension Music Collection 3.0.3. The vulnerability is an SQL Injection in the id parameter of the Music Collection component, caused by unsanitized input in that parameter. Exploit details are available in public advisories (e.g., Exploit-DB and Packet Storm) s...
CVE-2018-17378
SQL Injection exists in the Penny Auction Factory 2.0.4 component for Joomla! via the filterorderDir or filterorder parameter...
CVE-2018-17379
CVE-2018-17379 affects the Joomla! Raffle Factory 3.5.2 component, exposing a SQL Injection vulnerability via the filter_order_Dir and filter_order parameters. This allows an attacker to manipulate SQL queries, potentially impacting confidentiality, integrity, and availability (per CVSS metrics)....
CVE-2018-17397
CVE-2018-17397 : The Joomla! component AlphaIndex Dictionaries 1.0 is vulnerable to SQL injection via the letter parameter in the application’s input handling (getArticlesPreview). Public references and exploits demonstrate attacker-controlled SQL can be injected, with CVSS scores indicating HIGH...
CVE-2018-17383
SQL Injection exists in the Collection Factory 4.1.9 component for Joomla! via the filterorder or filterorderDir parameter...
CVE-2018-17397
SQL Injection exists in the AlphaIndex Dictionaries 1.0 component for Joomla! via the letter parameter...
CVE-2018-17380
CVE-2018-17380 affects Joomla! Article Factory Manager 4.3.9. The vulnerability is a SQL Injection in the Article Factory Manager component, exploitable via the start_date, m_start_date, or m_end_date parameters in the affected extension. Root cause: unsafely constructed SQL queries derived from ...
CVE-2018-17384
CVE-2018-17384 affects Joomla! Swap Factory 2.2.1. The vulnerability is a SQL Injection in the Swap Factory component, exploitable via the filter_order_Dir and filter_order parameters, allowing an attacker to manipulate database queries. Root cause is unsafe handling of user input in the affected...