Joomla! Component JSP Tickets 1.1 - SQL Injection

Joomla! Component JSP Tickets 1.1 - SQL Injection Exploit Title: Joomla! Component JSP Tickets 1.1 - SQL Injection Dork: N/A Date: 04.02.2018 Vendor Homepage: http://joomlaserviceprovider.com/ Software Link:...

CVE-2018-6580

Arbitrary file upload exists in the Jimtawl 2.1.6 and 2.2.5 component for Joomla! via a view=upload&task=upload&pop=true&tmpl=component request...

CVE-2018-6578

SQL Injection exists in the JE PayperVideo 3.0.0 component for Joomla! via the usrplan parameter in a view=myplans&task=myplans.usersubscriptions request...

CVE-2018-6577

SQL Injection exists in the JEXTN Membership 3.1.0 component for Joomla! via the usrplan parameter in a view=myplans&task=myplans.usersubscriptions request...

Joomla! Component JE PayperVideo 3.0.0 - usr_plan SQL Injection

Joomla! Component JE PayperVideo 3.0.0 - usrplan SQL Injection...

Joomla! Component JE PayperVideo 3.0.0 - 'usr_plan' SQL Injection

...

Joomla! Component JEXTN Classified 1.0.0 - 'sid' SQL Injection

Exploit Title: Joomla! Component JEXTN Classified 1.0.0 - SQL Injection Dork: N/A Date: 01.02.2018 Vendor Homepage: http://jextn.com/ Software Link: https://extensions.joomla.org/extensions/extension/ads-a-affiliates/classified-ads/jextn-classified/ Version: 1.0.0 Category: Webapps Tested on:...

Joomla! Jimtawl 2.2.5 Shell Upload

Exploit Title: Joomla! Component Jimtawl 2.2.5 - Arbitrary File Upload Dork: N/A Date: 01.02.2018 Vendor Homepage: http://janguo.de/ Software Link: https://extensions.joomla.org/extensions/extension/multimedia/streaming-a-broadcasting/jimtawl/ Software Download:...

Joomla! Component Jimtawl 2.1.6 - Arbitrary File Upload

Joomla! Component Jimtawl 2.1.6 - Arbitrary File Upload Exploit Title: Joomla! Component Jimtawl 2.2.5 - Arbitrary File Upload Dork: N/A Date: 01.02.2018 Vendor Homepage: http://janguo.de/ Software Link: https://extensions.joomla.org/extensions/extension/multimedia/streaming-a-broadcasting/jimtaw...

CVE-2018-6397

Directory Traversal exists in the Picture Calendar 3.1.4 component for Joomla! via the list.php folder parameter...

CVE-2018-6398

SQL Injection exists in the CP Event Calendar 3.0.1 component for Joomla! via the id parameter in a task=load action...

CVE-2018-6008

Arbitrary File Download exists in the Jtag Members Directory 5.3.7 component for Joomla! via the downloadfile parameter...

Joomla! Component JEXTN FAQ Pro 4.0.0 - id SQL Injection

Joomla! Component JEXTN FAQ Pro 4.0.0 - id SQL Injection Exploit Title: Joomla! Component JEXTN FAQ Pro 4.0.0 - SQL Injection Dork: N/A Date: 24.12.2017 Vendor Homepage: http://jextn.com/ Software Link: https://extensions.joomla.org/extensions/extension/directory-a-documentation/faq/jextn-faq-pro...

Joomla! Component JB Visa 1.0 - 'visatype' SQL Injection

Exploit Title: Joomla! Component JB Visa 1.0 - SQL Injection Dork: N/A Date: 17.12.2017 Vendor Homepage: http://joombooking.com/ Software Link: https://extensions.joomla.org/extensions/extension/vertical-markets/booking-a-reservations/jb-visa/ Version: 1.0 Category: Webapps Tested on:...

Joomla! Component Guru Pro - 'promocode' SQL Injection

Exploit Title: Joomla! Component Guru Pro 'promocode'- SQL Injection Dork: N/A Date: 17.12.2017 Vendor Homepage: https://www.ijoomla.com/ Software Link: https://www.ijoomla.com/component/digistore/products/47-joomla-add-ons/119-guru-pro/189?Itemid=189 Version: N/A Category: Webapps Tested on:...

ZhandexMap component SQL injection vulnerability in Joomla!

Zh YandexMap aka comzhyandexmap component is a component used in Joomla! to distribute maps through the Yandex Maps service. A SQL injection vulnerability exists in version 6.1.1.0 of the Joomla! Zh YandexMap component. A remote attacker can exploit the vulnerability by sending SQL injection...

CVE-2017-15966

The Zh YandexMap aka comzhyandexmap component 6.1.1.0 for Joomla! allows SQL Injection via the placemarklistid parameter to index.php...

Joomla Component com_phpbridge SQL Injection

SQL Injection vulnerability in Joomla PHP Bridge component id parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

Joomla! Component Huge-IT Portfolio Gallery Plugin 1.0.6 - SQL Injection

Exploit Title Unauthenticated SQL Injection in Huge-IT Portfolio Gallery Plugin v1.0.6 Date: 2016-09-16 Exploit Author: Larry W. Cashdollar, @larry0 Vendor Homepage: http://huge-it.com/joomla-portfolio-gallery/ Software Link: Version: 1.0.6 Tested on: Linux CVE : CVE-2016-1000124 Advisory:...

Joomla! Component Quiz Deluxe 3.7.4 - SQL Injection

Exploit Title: Joomla! Component Quiz Deluxe 3.7.4 - SQL Injection Dork: N/A Date: 30.08.2017 Vendor Homepage: http://joomplace.com/ Software Link: https://extensions.joomla.org/extensions/extension/living/education-a-culture/quiz-deluxe/ Demo:...