1479 matches found
CVE-2016-1000121
XSS and SQLi in Huge IT Joomla Slider v1.0.9 extension...
CVE-2016-1000121
CVE-2016-1000121 affects the Huge IT Joomla Slider extension v1.0.9. The connected documents describe reflected XSS and SQL Injection vulnerabilities in the component, arising from inadequate input filtering in the extension’s admin code paths (notably in the slider manager and related PHP files)...
CVE-2016-1000120
CVE-2016-1000120 affects Joomla's Huge IT Catalog extension (v1.0.4). The connected sources confirm SQL injection and cross-site scripting vulnerabilities in the catalog component caused by inadequate validation of user-submitted input. Potential impact, as described in CNVD, includes arbitrary s...
CVE-2016-1000120: Improper Neutralization of Special Elements used in an SQL Command
SQLi and XSS in Huge IT catalog extension v1.0.4 for Joomla...
PT-2016-4513
Name of the Vulnerable Software and Affected Versions Huge IT Joomla Slider version 1.0.9 Description The issue involves XSS and SQLi in the Huge IT Joomla Slider extension. Recommendations For version 1.0.9, update to a newer version that contains a fix for this issue, if available. At the momen...
CVE-2016-1000121: Improper Neutralization of Input During Web Page Generation
XSS and SQLi in Huge IT Joomla Slider v1.0.9 extension...
CVE-2016-1000122: Improper Neutralization of Special Elements used in an SQL Command
XSS and SQLi in Huge IT Joomla Slider v1.0.9 extension...
PT-2016-4514
Name of the Vulnerable Software and Affected Versions Huge IT Joomla Slider version 1.0.9 Description The issue involves XSS and SQLi in the Huge IT Joomla Slider extension. Recommendations For version 1.0.9, update to a newer version that contains a fix for this issue, if available. At the momen...
CVE-2016-1000118
XSS & SQLi in HugeIT slideshow v1.0.4...
CVE-2016-1000117
Consolidated details show CVE-2016-1000117 affects the Huge-IT Slideshow extension (Joomla!) v1.0.4. The vulnerability is described as cross-site scripting (XSS) and SQL injection (SQLi). CNVD-2016-06066 specifies the flaw resides in /views/slideshow/tmpl/default.php and is exploitable via the 'i...
CVE-2016-1000118
XSS & SQLi in HugeIT slideshow v1.0.4...
CVE-2016-1000118
CVE-2016-1000118 affects HugeIT Slideshow v1.0.4 ( Joomla! extension). Connected records confirm a SQL injection vulnerability in /models/slideshow.php and NVD also lists XSS in the same product/version. Impact per sources includes possible arbitrary SQL execution and cross‑site scripting; exploi...
CVE-2016-1000119: Improper Neutralization of Input During Web Page Generation
SQLi and XSS in Huge IT catalog extension v1.0.4 for Joomla...
PT-2016-4509
Name of the Vulnerable Software and Affected Versions HugeIT slideshow version 1.0.4 Description The issue concerns a combination of cross-site scripting XSS and SQL injection SQLi in the affected software. Recommendations For version 1.0.4, update to a newer version that contains a fix for this...
OpenCimetiere 3.0.0-a5 - Blind SQL Injection
OpenCimetiere 3.0.0-a5 - Blind SQL Injection Exploit Title: OpenCimetiere v3.0.0-a5 | Blind SQL Injection Date: 06/08/16 Exploit Author: Wad Deek Vendor Homepage: http://www.openmairie.org/ Software Link: http://www.openmairie.org/catalogue/opencimetiere/ Version: 3.0.0-a5 +3.0.0-a5...
CVE-2016-1000217
Zotpress plugin for WordPress SQLi in zpgetaccount...
CVE-2016-1000113
XSS and SQLi in huge IT gallery v1.1.5 for Joomla...
CVE-2016-1000217
CVE-2016-1000217 corresponds to a SQL injection in the Zotpress WordPress plugin, specifically in the zp_get_account() function. Affected product: WordPress Zotpress plugin (pre-6.1.3). The vulnerability enables remote attackers to submit crafted SQL queries via the affected API, with network-rem...
CVE-2016-1000113
CVE-2016-1000113 affects Joomla! Huge-IT Image Gallery extension (v1.1.5). Reported XSS and SQL injection flaws stem from insufficient input validation in the gallery plugin (notably id parameter handling in admin/gallery.php). Impact per the records includes potential disclosure or modification ...