Lucene search
+L

54 matches found

Tenable Nessus
Tenable Nessus
•added 2018/11/05 12:00 a.m.•23 views

Joomla! 3.7.x < 3.8.6 User Notes List View SQL Injection

According to its self-reported version number, the detected Joomla! application is affected by an SQL injection vulnerability in the User Notes list view. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number. No source...

8.8CVSS8.3AI score0.28245EPSS
SaveExploits2References3
Tenable Nessus
Tenable Nessus
•added 2018/11/05 12:00 a.m.•23 views

Joomla! 3.6.x < 3.8.6 User Notes List View SQL Injection

According to its self-reported version number, the detected Joomla! application is affected by an SQL injection vulnerability in the User Notes list view. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number. No source...

8.8CVSS8.3AI score0.28245EPSS
SaveExploits2References3
Tenable Nessus
Tenable Nessus
•added 2018/11/05 12:00 a.m.•24 views

Joomla! 3.8.x < 3.8.6 User Notes List View SQL Injection

According to its self-reported version number, the detected Joomla! application is affected by an SQL injection vulnerability in the User Notes list view. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number. No source...

8.8CVSS8.3AI score0.28245EPSS
SaveExploits2References3
Tenable Nessus
Tenable Nessus
•added 2018/11/05 12:00 a.m.•20 views

Joomla! 3.5.x < 3.8.6 User Notes List View SQL Injection

According to its self-reported version number, the detected Joomla! application is affected by an SQL injection vulnerability in the User Notes list view. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number. No source...

8.8CVSS8.3AI score0.28245EPSS
SaveExploits2References3
seebug.org
seebug.org
•added 2018/03/29 12:00 a.m.•101 views

Joomla内核SQL注入漏洞(CVE-2018-8045)

作者:绿盟科技 来源: CVE-2018-8045 漏洞简介 漏洞具体情况可参见绿盟科技安全威胁周报-201812周 Joomla! Core SQL注入漏洞: NSFOCUS ID:39158 CVE ID:CVE-2018-8045 受影响版本:Joomla! Joomla! 3.5.0-3.8.5 漏洞点评:Joomla是一套网站内容管理系统,使用PHP语言和MySQL数据库开发。Joomla! 3.5.0 -3.8.5版本对SQL语句内的变量缺少类型转换,导致User Notes列表视图内SQL注 入漏洞,可使攻击者访问或修改数据等。目前厂商已经发布了升级补丁,修复了这个...

8.6AI score0.28245EPSS
SaveExploits2
Tenable Nessus
Tenable Nessus
•added 2018/03/23 12:00 a.m.•96 views

Joomla! 3.5.0 < 3.8.6 User Notes List View SQL Injection

According to its self-reported version number, the Joomla! installation running on the remote web server is 3.5.0 or later but prior to 3.8.6. It is, therefore, affected by an SQL injection vulnerability. Note that Nessus has not attempted to exploit these issues but has instead relied only on th...

8.8CVSS8.1AI score0.28245EPSS
SaveExploits2References3
OSV
OSV
•added 2018/03/15 1:29 a.m.•16 views

CVE-2018-8045

In Joomla! 3.5.0 through 3.8.5, the lack of type casting of a variable in a SQL statement leads to a SQL injection vulnerability in the User Notes list view...

8.8CVSS8AI score
SaveExploits0References3
NVD
NVD
•added 2018/03/15 1:29 a.m.•17 views

CVE-2018-8045

In Joomla! 3.5.0 through 3.8.5, the lack of type casting of a variable in a SQL statement leads to a SQL injection vulnerability in the User Notes list view...

8.8CVSS8.9AI score0.28245EPSS
SaveExploits2References3
Prion
Prion
•added 2018/03/15 1:29 a.m.•16 views

Sql injection

In Joomla! 3.5.0 through 3.8.5, the lack of type casting of a variable in a SQL statement leads to a SQL injection vulnerability in the User Notes list view...

6.5CVSS8.8AI score0.28245EPSS
SaveExploits2References3Affected Software1
Dsquare
Dsquare
•added 2018/03/15 12:00 a.m.•570 views

Joomla User Notes List View SQL Injection

SQL Injection vulnerability in Joomla filtercategoryid parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

6.5CVSS1.3AI score0.28245EPSS
SaveExploits2
CVE
CVE
•added 2018/03/14 8:00 p.m.•123 views

CVE-2018-8045

CVE-2018-8045 affects Joomla! versions 3.5.0 through 3.8.5, where a lack of type casting in a SQL statement in the User Notes list view enables an SQL injection vulnerability. Exploitation could allow a remote attacker to execute arbitrary SQL commands on the affected system (per connected adviso...

8.8CVSS8.8AI score0.28245EPSS
SaveExploits2References3Affected Software1
Cvelist
Cvelist
•added 2018/03/14 8:00 p.m.•49 views

CVE-2018-8045

In Joomla! 3.5.0 through 3.8.5, the lack of type casting of a variable in a SQL statement leads to a SQL injection vulnerability in the User Notes list view...

8.9AI score0.28245EPSS
SaveExploits2References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/03/14 12:00 a.m.•1 views

CVE-2018-8045: Improper Neutralization of Special Elements used in an SQL Command

In Joomla! 3.5.0 through 3.8.5, the lack of type casting of a variable in a SQL statement leads to a SQL injection vulnerability in the User Notes list view...

8.8CVSS7.7AI score0.28245EPSS
SaveExploits2References2
Joomla! Vulnerable Extensions List
Joomla! Vulnerable Extensions List
•added 2018/03/08 12:00 a.m.•543 views

[20180301] - Core - SQLi vulnerability User Notes

The lack of type casting of a variable in SQL statement leads to a SQL injection vulnerability in the User Notes list view...

8.8CVSS9.1AI score0.28245EPSS
SaveExploits2Affected Software1
Rows per page
Query Builder