Huge-IT Video Gallery Extension SQL Injection Vulnerability in Joomla!

Joomla! is the U.S. Open Source Matters team developed a set of open source content management system CMS, the system provides RSS feeds , site search and other features . Huge-IT Image Gallery is one of the image gallery extension plug-ins . A SQL injection vulnerability exists in version 1.0.9 ...

Huge-IT Slideshow SQL Injection Vulnerability

Huge-IT Slideshow is an extension developed by the Huge-IT team for use in Joomla! to attract visitors by improving the style and character of your website. Huge-IT Slideshow v1.0.4 in . /models/slideshow.php file contains a SQL injection vulnerability. An attacker can exploit this vulnerability ...

K2 Joomla! Extension Cross Site Scripting

================================================================ K2 Joomla! Extension PoC: http://localhost/administrator/index.php?option=comk2&view=categori...

Multiple Vulnerabilities in Joomla! Huge-IT Catalog Extension

Joomla! is an open source content management system CMS developed by the Open Source Matters team in the United States. The system provides RSS feeds, site search, etc. Huge-IT Catalog is one of the extensions to display products in the most attractive way. SQL injection vulnerabilities and...

Huge IT Joomla Slider 1.0.9 XSS / SQL Injection

Title: Reflected XSS and SQLi in Huge IT Joomla Slider v1.0.9 extension Author: Larry W. Cashdollar, @larry0 Date: 2016-07-22 Download Site: http://extensions.joomla.org/extensions/extension/photos-a-images/slider Vendor: huge-it.com Vendor Notified: 2016-07-22 Vendor Contact: Description: Huge-I...

Advanced Module Manager Free extension for Joomla!: source code security analysis report

Several vulnerabilities were discovered in Regular Labs 'Advanced Module Manager Free extension for Joomla!' software: Using Insufficiently Random Generators in Cryptography Incorrect Permissions for External Entities During XML Document Processing Incorrect User Input Filtration when Generating...

Joomla! Component com_poweradmin 2.3.0 - Multiple Vulnerabilities

--------------------------------------------------------- RatioSec Research Security Advisory RS-2016-001 --------------------------------------------------------- JSN PowerAdmin Joomla! Extension Remote Command Execution Via CSRF and XSS vulnerabilities...

Realtyna RPL Joomla Extension 8.9.2 index.php 参数 Itemid SQL注入

No description provided by source...

Joomla! Component Realtyna RPL 8.9.2 - Multiple SQL Injections

Realtyna RPL 8.9.2 Joomla Extension Multiple SQL Injection Vulnerabilities Vendor: Realtyna LLC Product web page: https://www.realtyna.com Affected version: 8.9.2 Summary: Realtyna CRM Client Relationship Management Add-on for RPL is a Real Estate CRM specially designed and developed based on...

Realtyna RPL 8.9.2 CSRF / Cross Site Scripting

Realtyna RPL 8.9.2 Joomla Extension Persistent XSS And CSRF Vulnerabilities Vendor: Realtyna LLC Product web page: https://www.realtyna.com Affected version: 8.9.2 Summary: Realtyna CRM Client Relationship Management Add-on for RPL is a Real Estate CRM specially designed and developed based on...

Realtyna RPL 8.9.2 SQL Injection

Realtyna RPL 8.9.2 Joomla Extension Multiple SQL Injection Vulnerabilities Vendor: Realtyna LLC Product web page: https://www.realtyna.com Affected version: 8.9.2 Summary: Realtyna CRM Client Relationship Management Add-on for RPL is a Real Estate CRM specially designed and developed based on...

Realtyna RPL 8.9.2 Joomla Extension Multiple SQL Injection Vulnerabilities

Summary Realtyna CRM Client Relationship Management Add-on for RPL is a Real Estate CRM specially designed and developed based on business process and models required by Real Estate Agents/Brokers. Realtyna CRM intends to increase the Conversion Ratio of the website Visitors to Leads and then Lea...

OS Solution OSProperty 2.8.0 SQL Injection

OS Solution OSProperty 2.8.0 was vulnerable to an unauthenticated SQL injection in the countryid parameter of the request made to retrieve a list of states for a given country. The version was not bumped when the vulnerability was fixed, but if you download after April 27th, you downloaded a fixe...

Reflected Cross-Site Scripting (XSS) in Simple Email Form Joomla Extension

Advisory ID: HTB23241 Product: Simple Email Form Joomla Extension Vendor: Doug Bierer Vulnerable Versions: 1.8.5 and probably prior Tested Version: 1.8.5 Advisory Publication: October 29, 2014 without technical details Vendor Notification: October 29, 2014 Public Disclosure: November 19, 2014...

Reflected Cross-Site Scripting (XSS) in Simple Email Form Joomla Extension

High-Tech Bridge Security Research Lab discovered vulnerability in Simple Email Form Joomla Extension, which can be exploited to perform Cross-Site Scripting XSS attacks against visitors and administrators of Joomla websites with installed plugin. 1 Reflected Cross-Site Scripting XSS in Simple...

Joomla Spider 2.8.3 SQL Injection

Exploit Title : Joomla Spider video player 2.8.3 SQL Injection Exploit Author : Claudio Viviani Vendor Homepage : http://web-dorado.com/ Software Link : http://extensions.joomla.org/extensions/multimedia/multimedia-players/video-players-a-gallery/22321 Dork Google:...

Joomla! Component spidervideoplayer - theme SQL Injection

Joomla! Component spidervideoplayer - theme SQL Injection source: https://www.securityfocus.com/bid/69422/info Spider Video Player extension for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. An...

Joomla DJ-Classifieds Extension com_djclassifieds Upload Vulnerability

No description provided by source...

Joomla ABC Extension com_abc SQL Injection Exploit

No description provided by source...

JCE Joomla Extension <= 2.0.10 - Multiple Vulnerabilities

No description provided by source. www.BugReport.ir AmnPardaz Security Research Team Title: JCE Joomla Extension =2.0.10 Multiple Vulnerabilities Vendor: www.joomlacontenteditor.net Exploit: Available Vulnerable Version: 2.0.10 Image Manager 1.5.7.13, Media Manager 1.5.6.3, Template Manager 1.5.5...