Joomla! Component JEXTN FAQ Pro 4.0.0 - id SQL Injection

Joomla! Component JEXTN FAQ Pro 4.0.0 - id SQL Injection Exploit Title: Joomla! Component JEXTN FAQ Pro 4.0.0 - SQL Injection Dork: N/A Date: 24.12.2017 Vendor Homepage: http://jextn.com/ Software Link: https://extensions.joomla.org/extensions/extension/directory-a-documentation/faq/jextn-faq-pro...

Joomla! Component JB Visa 1.0 - 'visatype' SQL Injection

Exploit Title: Joomla! Component JB Visa 1.0 - SQL Injection Dork: N/A Date: 17.12.2017 Vendor Homepage: http://joombooking.com/ Software Link: https://extensions.joomla.org/extensions/extension/vertical-markets/booking-a-reservations/jb-visa/ Version: 1.0 Category: Webapps Tested on:...

Joomla! Component Guru Pro - 'promocode' SQL Injection

Exploit Title: Joomla! Component Guru Pro 'promocode'- SQL Injection Dork: N/A Date: 17.12.2017 Vendor Homepage: https://www.ijoomla.com/ Software Link: https://www.ijoomla.com/component/digistore/products/47-joomla-add-ons/119-guru-pro/189?Itemid=189 Version: N/A Category: Webapps Tested on:...

ZhandexMap component SQL injection vulnerability in Joomla!

Zh YandexMap aka comzhyandexmap component is a component used in Joomla! to distribute maps through the Yandex Maps service. A SQL injection vulnerability exists in version 6.1.1.0 of the Joomla! Zh YandexMap component. A remote attacker can exploit the vulnerability by sending SQL injection...

CVE-2017-15966

The Zh YandexMap aka comzhyandexmap component 6.1.1.0 for Joomla! allows SQL Injection via the placemarklistid parameter to index.php...

Joomla! Component Huge-IT Portfolio Gallery Plugin 1.0.6 - SQL Injection

Exploit Title Unauthenticated SQL Injection in Huge-IT Portfolio Gallery Plugin v1.0.6 Date: 2016-09-16 Exploit Author: Larry W. Cashdollar, @larry0 Vendor Homepage: http://huge-it.com/joomla-portfolio-gallery/ Software Link: Version: 1.0.6 Tested on: Linux CVE : CVE-2016-1000124 Advisory:...

Joomla Component com_phpbridge SQL Injection

SQL Injection vulnerability in Joomla PHP Bridge component id parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

Joomla! Component Joomanager 2.0.0 - 'com_Joomanager' Arbitrary File Download (PoC)

Exploit Title: Joomla! Component Joomanager 2.0.0 - Arbitrary File Download Dork: N/A Date: 30.08.2017 Vendor Homepage: http://www.joomanager.com/ Software Link: https://extensions.joomla.org/extensions/extension/vertical-markets/real-estate/joomanager/ Demo:...

Joomla! Component Quiz Deluxe 3.7.4 - SQL Injection

Exploit Title: Joomla! Component Quiz Deluxe 3.7.4 - SQL Injection Dork: N/A Date: 30.08.2017 Vendor Homepage: http://joomplace.com/ Software Link: https://extensions.joomla.org/extensions/extension/living/education-a-culture/quiz-deluxe/ Demo:...

Joomla! Component Bargain Product VM3 1.0 - 'product_id' SQL Injection

Exploit Title: Joomla! Component Bargain Product VM3 1.0 - SQL Injection Dork: N/A Date: 25.08.2017 Vendor Homepage: https://www.weborange.eu/ Software Link: https://www.weborange.eu/extensions/index.php/extensions-vm3/bargain-product-vm3-detail Demo:...

Joomla! Component Ajax Quiz 1.8 - SQL Injection

Joomla! Component Ajax Quiz 1.8 - SQL Injection Exploit Title: Joomla! Component Ajax Quiz 1.8 - SQL Injection Dork: N/A Date: 21.08.2017 Vendor Homepage: http://webkul.com/ Software Link: https://extensions.joomla.org/extensions/extension/living/education-a-culture/ajaxquiz/ Demo:...

Joomla! Component FocalPoint 1.2.3 - SQL Injection

Exploit Title: Joomla! Component FocalPoint Pro / Free v1.2.3 - SQL Injection Dork: N/A Date: 21.08.2017 Vendor Homepage: http://focalpointx.com/ Software Link: http://focalpointx.com/demos/focalpoint-pro Demo: http://focalpointx.com/demos/focalpoint-free/ Demo:...

Joomla! Component Flip Wall 8.0 - 'wallid' SQL Injection

Exploit Title: Joomla! Component Flip Wall 8.0 - SQL Injection Dork: N/A Date: 21.08.2017 Vendor Homepage: http://pulseextensions.com/ Software Link: https://extensions.joomla.org/extensions/extension/ads-a-affiliates/sponsors/flip-wall/ Demo:...

Joomla! Component Calendar Planner 1.0.1 - SQL Injection

Joomla! Component Calendar Planner 1.0.1 - SQL Injection Exploit Title: Joomla! Component Calendar Planner 1.0.1 - SQL Injection Dork: N/A Date: 18.08.2017 Vendor Homepage: http://joomlathat.com/ Software Link:...

Joomla! Component Appointment 1.1 - SQL Injection

Exploit Title: Joomla! Component Appointment v1.1 - SQL Injection Dork: N/A Date: 18.08.2017 Vendor Homepage: https://www.joomlaextensions.co.in/ Software Link: https://extensions.joomla.org/extensions/extension/appointment/ Demo: http://joomlaextension.biz/appointment/ Version: 1.1 Category:...

Joomla! Component Calendar Planner 1.0.1 - SQL Injection

Exploit Title: Joomla! Component Calendar Planner 1.0.1 - SQL Injection Dork: N/A Date: 18.08.2017 Vendor Homepage: http://joomlathat.com/ Software Link: https://extensions.joomla.org/extensions/extension/calendars-a-events/events/calendar-planner/ Demo: http://demo.joomlathat.com/ Version: 1.0.1...

Joomla! Component JoomRecipe 1.0.3 - SQL Injection

Joomla! Component JoomRecipe 1.0.3 - SQL Injection Exploit Title: Joomla! Component JoomRecipe 1.0.3 - SQL Injection Dork: N/A Date: 15.06.2017 Vendor : http://joomboost.com/ Software: https://extensions.joomla.org/extensions/extension/vertical-markets/food-a-beverage/joomrecipe/ Demo:...

Joomla! 'com_fields' component SQL injection vulnerability

Joomla! is one of the most popular Content Management System CMS solutions in the world. A SQL injection vulnerability exists in the 'comfields' component of Joomla! An attacker can exploit the vulnerability to obtain sensitive information from the database...

Joomla JobGrok Application 3.1-1.2.55 Component - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla Component JobGrok Application 3.1-1.2.55 - SQL Injection Date: 2017-04-02 Home : https://extensions.joomla.org/extension/job-grok-app/ Exploit Author: Persian Hack Team Discovered by : Mojtaba MobhaM email protected Home ...

Joomla! Component jCart for OpenCart 2.0 - product_id SQL Injection

Joomla! Component jCart for OpenCart 2.0 - productid SQL Injection Exploit Title: Joomla! Component jCart for OpenCart v2.0 - SQL Injection Google Dork: N/A Date: 20.03.2017 Vendor Homepage: http://soft-php.com Software:...