Lucene search
+L

19614 matches found

exploitpack
exploitpack
•added 2018/06/18 12:00 a.m.•33 views

Joomla! Component Jomres 9.11.2 - Cross-Site Request Forgery (Add User)

Joomla! Component Jomres 9.11.2 - Cross-Site Request Forgery Add User Exploit Title: Joomla!Component jomres 9.11.2 - Cross site request forgery Date: 2018-06-15 Exploit Author: L0RD Vendor Homepage: https://www.jomres.net/ Software link: https://extensions.joomla.org/extension/jomres/ Software...

SaveExploits0
zdt
zdt
•added 2018/06/18 12:00 a.m.•64 views

Joomla jomres 9.11.2 Component - Cross-Site Request Forgery Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla!Component jomres 9.11.2 - Cross site request forgery Date: 2018-06-15 Exploit Author: L0RD Vendor Homepage: https://www.jomres.net/ Software link: https://extensions.joomla.org/extension/jomres/ Software Download:...

0.3AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2018/06/18 12:00 a.m.•70 views

Joomla! Component Jomres 9.11.2 - Cross-Site Request Forgery (Add User)

Exploit Title: Joomla!Component jomres 9.11.2 - Cross site request forgery Date: 2018-06-15 Exploit Author: L0RD Vendor Homepage: https://www.jomres.net/ Software link: https://extensions.joomla.org/extension/jomres/ Software Download:...

5.3AI score
SaveExploits0
zdt
zdt
•added 2018/06/15 12:00 a.m.•64 views

Joomla Ek rishta 2.10 Component - SQL Injection Vulnerability

Exploit for php platform in category web applications Title: SQL Injection Joomla Component Ek rishta 2.10 - SQL Injection Exploit Author: Guilherme Assmann Vendor Homepage:https://www.joomla.org/ Version: 2.10 Tested on: MacOSX, Safari, Chrome Download:...

0.2AI score0.02582EPSS
SaveExploits5
CNVD
CNVD
•added 2018/06/15 12:00 a.m.•17 views

Balbooa Gridbox Extension Cross-Site Scripting Vulnerability in Joomla!

Joomla! is an American Open Source Matters team developed a set of open source content management system CMS, the system provides RSS feeds, site search and other features . Balbooa Gridbox extension is used in which a drag-and-drop site building extension . A cross-site scripting vulnerability...

6.1CVSS6.3AI score0.3351EPSS
SaveExploits2References1
OSV
OSV
•added 2018/06/14 8:29 p.m.•14 views

CVE-2018-11690

The Balbooa Gridbox extension version 2.4.0 and previous versions for Joomla! is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability via a crafted URL to execute script in a victim's Web browser within the...

6.1CVSS5.8AI score0.3351EPSS
SaveExploits2References5
NVD
NVD
•added 2018/06/14 8:29 p.m.•35 views

CVE-2018-11690

The Balbooa Gridbox extension version 2.4.0 and previous versions for Joomla! is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability via a crafted URL to execute script in a victim's Web browser within the...

6.1CVSS6.3AI score0.3351EPSS
SaveExploits2References5
Prion
Prion
•added 2018/06/14 8:29 p.m.•28 views

Cross site scripting

The Balbooa Gridbox extension version 2.4.0 and previous versions for Joomla! is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability via a crafted URL to execute script in a victim's Web browser within the...

4.3CVSS6.3AI score0.3351EPSS
SaveExploits2References5Affected Software1
Cvelist
Cvelist
•added 2018/06/14 8:00 p.m.•48 views

CVE-2018-11690

The Balbooa Gridbox extension version 2.4.0 and previous versions for Joomla! is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability via a crafted URL to execute script in a victim's Web browser within the...

6.3AI score0.3351EPSS
SaveExploits2References5
CVE
CVE
•added 2018/06/14 8:00 p.m.•71 views

CVE-2018-11690

The CVE-2018-11690 entry matches a Joomla! Gridbox vulnerability: Balbooa Gridbox extension (version 2.4.0 and earlier) is affected by cross-site scripting due to improper validation of user-supplied input. An attacker can craft a URL to execute script in a victim’s browser within the site’s cont...

6.1CVSS6.3AI score0.3351EPSS
SaveExploits2References5Affected Software1
Packet Storm
Packet Storm
•added 2018/06/14 12:00 a.m.•47 views

Joomla Ek Rishta 2.10 SQL Injection

Title: SQL Injection Joomla Component Ek rishta 2.10 - SQL Injection Date: 2018-06-14 Exploit Author: Guilherme Assmann Vendor Homepage:https://www.joomla.org/ Version: 2.10 Tested on: MacOSX, Safari, Chrome Download: https://extensions.joomla.org/extension/ek-rishta/ CVE: CVE-2018-12254...

0.3AI score0.02582EPSS
SaveExploits5
exploitpack
exploitpack
•added 2018/06/14 12:00 a.m.•45 views

Joomla Component Ek Rishta 2.10 - SQL Injection

Joomla Component Ek Rishta 2.10 - SQL Injection Title: SQL Injection Joomla Component Ek rishta 2.10 - SQL Injection Date: 2018-06-14 Exploit Author: Guilherme Assmann Vendor Homepage:https://www.joomla.org/ Version: 2.10 Tested on: MacOSX, Safari, Chrome Download:...

6.5CVSS0.3AI score0.02582EPSS
SaveExploits5
CNVD
CNVD
•added 2018/06/14 12:00 a.m.•16 views

Harmis Ek rishta SQL Injection Vulnerability in Joomla!

Joomla! is an open source content management system CMS developed by the Open Source Matters team in the U.S. The system provides RSS feeds, site search, etc. Harmis Ek rishta aka ek-rishta is used in one of the wedding dating site plugin. A SQL injection vulnerability exists in the router.php fi...

8.8CVSS8AI score0.02582EPSS
SaveExploits5References1
Exploit DB
Exploit DB
•added 2018/06/14 12:00 a.m.•70 views

Joomla! Component Ek Rishta 2.10 - SQL Injection

Title: SQL Injection Joomla Component Ek rishta 2.10 - SQL Injection Date: 2018-06-14 Exploit Author: Guilherme Assmann Vendor Homepage:https://www.joomla.org/ Version: 2.10 Tested on: MacOSX, Safari, Chrome Download: https://extensions.joomla.org/extension/ek-rishta/ CVE: CVE-2018-12254...

8.8CVSS7.9AI score0.02582EPSS
SaveExploits5
OSV
OSV
•added 2018/06/12 5:29 p.m.•15 views

CVE-2018-12254

router.php in the Harmis Ek rishta aka ek-rishta 2.10 component for Joomla! allows SQL Injection via the PATHINFO to a home/requesteduser/Sent%20interest/ URI...

8.8CVSS5.8AI score0.02582EPSS
SaveExploits5References2
NVD
NVD
•added 2018/06/12 5:29 p.m.•34 views

CVE-2018-12254

router.php in the Harmis Ek rishta aka ek-rishta 2.10 component for Joomla! allows SQL Injection via the PATHINFO to a home/requesteduser/Sent%20interest/ URI...

8.8CVSS9AI score0.02582EPSS
SaveExploits5References2
Prion
Prion
•added 2018/06/12 5:29 p.m.•26 views

Sql injection

router.php in the Harmis Ek rishta aka ek-rishta 2.10 component for Joomla! allows SQL Injection via the PATHINFO to a home/requesteduser/Sent%20interest/ URI...

6.5CVSS9AI score0.02582EPSS
SaveExploits5References2Affected Software1
CVE
CVE
•added 2018/06/12 5:00 p.m.•80 views

CVE-2018-12254

CVE-2018-12254 affects the Joomla! Ek Rishta (Harmis Ek rishta) 2.10 component. The vulnerability is a SQL injection in router.php that can be triggered via PATH_INFO to the URI path home/requested_user/Sent%20interest/[username], due to improper handling of input. This allows arbitrary SQL comma...

8.8CVSS8.9AI score0.02582EPSS
SaveExploits5References2Affected Software1
Cvelist
Cvelist
•added 2018/06/12 5:00 p.m.•40 views

CVE-2018-12254

router.php in the Harmis Ek rishta aka ek-rishta 2.10 component for Joomla! allows SQL Injection via the PATHINFO to a home/requesteduser/Sent%20interest/ URI...

9AI score0.02582EPSS
SaveExploits5References2
exploitpack
exploitpack
•added 2018/06/12 12:00 a.m.•24 views

Joomla! Component EkRishta 2.10 - username SQL Injection

Joomla! Component EkRishta 2.10 - username SQL Injection Exploit Title: Joomla! Component EkRishta 2.10 - 'username' SQL Injection Date: 2018-06-11 Exploit Author: L0RD Software Link: https://extensions.joomla.org/extension/ek-rishta/ Vendor Homepage: https://www.joomlaextensions.co.in/ Version:...

0.6AI score
SaveExploits0
Rows per page
Query Builder