JB Bus, 2.3, SQL Injection

JB Bus by Joombooking, 2.3, SQL Injection...

CVE-2018-7726

An issue was discovered in ZZIPlib 0.13.68. There is a bus error caused by the zzipparserootdirectory function of zip.c. Attackers could leverage this vulnerability to cause a denial of service via a crafted zip file...

bus-nemus.fr XSS vulnerability

Open Bug Bounty ID: OBB-574765 Description| Value ---|--- Affected Website:| bus-nemus.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-7726

An issue was discovered in ZZIPlib 0.13.68. There is a bus error caused by the zzipparserootdirectory function of zip.c. Attackers could leverage this vulnerability to cause a denial of service via a crafted zip file...

UBUNTU-CVE-2018-7726

An issue was discovered in ZZIPlib 0.13.68. There is a bus error caused by the zzipparserootdirectory function of zip.c. Attackers could leverage this vulnerability to cause a denial of service via a crafted zip file...

openSUSE Security Update : systemd (openSUSE-2018-216)

This update for systemd fixes the following issues : Security issue fixed : - CVE-2017-18078: tmpfiles: refuse to chown/chmod files which are hardlinked, unless protectedhardlinks sysctl is on. This could be used by local attackers to gain privileges bsc1077925 Non Security issues fixed : - core:...

SUSE SLED12 / SLES12 Security Update : systemd (SUSE-SU-2018:0546-1)

This update for systemd fixes the following issues: Security issue fixed : - CVE-2017-18078: tmpfiles: refuse to chown/chmod files which are hardlinked, unless protectedhardlinks sysctl is on. This could be used by local attackers to gain privileges bsc1077925 Non Security issues fixed : - core:...

CVE-2018-6372

SQL Injection exists in the JB Bus 2.3 component for Joomla! via the ordernumber parameter...

CVE-2018-6372

SQL Injection exists in the JB Bus 2.3 component for Joomla! via the ordernumber parameter...

Sql injection

SQL Injection exists in the JB Bus 2.3 component for Joomla! via the ordernumber parameter...

CVE-2018-6372

SQL Injection vulnerability in Joomla! JB Bus 2.3 (JB Bus, 2.3) via the order_number parameter in index.php?option=com_bookpro&view=orderdetail. The issue affects JB Bus 2.3 component for Joomla! and is documented in CVE-2018-6372, with exploitation activity reported (Exploit-DB entry 44115 and r...

CVE-2018-6372

SQL Injection exists in the JB Bus 2.3 component for Joomla! via the ordernumber parameter...

Joomla! JB Bus 2.3 SQL Injection

Exploit Title: Joomla! Component JB Bus 2.3 - SQL Injection Dork: N/A Date: 16.02.2018 Vendor Homepage: http://joombooking.com/ Software Link: https://extensions.joomla.org/extensions/extension/vertical-markets/booking-a-reservations/jbtransport/ Version: 2.3 Category: Webapps Tested on:...

Joomla JB Bus 2.3 Component - order_number SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component JB Bus 2.3 - SQL Injection Vendor Homepage: http://joombooking.com/ Software Link: https://extensions.joomla.org/extensions/extension/vertical-markets/booking-a-reservations/jbtransport/ Version: 2.3 Category:...

Joomla! Component JB Bus 2.3 - order_number SQL Injection

Joomla! Component JB Bus 2.3 - ordernumber SQL Injection Exploit Title: Joomla! Component JB Bus 2.3 - SQL Injection Dork: N/A Date: 16.02.2018 Vendor Homepage: http://joombooking.com/ Software Link:...

Joomla! Component JB Bus 2.3 - 'order_number' SQL Injection

Exploit Title: Joomla! Component JB Bus 2.3 - SQL Injection Dork: N/A Date: 16.02.2018 Vendor Homepage: http://joombooking.com/ Software Link: https://extensions.joomla.org/extensions/extension/vertical-markets/booking-a-reservations/jbtransport/ Version: 2.3 Category: Webapps Tested on:...

jrbuskanto.co.jp XSS vulnerability

Open Bug Bounty ID: OBB-554394 Description| Value ---|--- Affected Website:| jrbuskanto.co.jp Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Flatpak Security Bypass Vulnerability

Flatpak is a system for building and installing Linux desktop applications. A security vulnerability exists in the bus-proxy/flatpak-proxy.c file in Flatpak versions prior to 0.8.9, 0.9.x, and 0.10.x prior to 0.10.3. An attacker can exploit this vulnerability to bypass the sandbox with the help o...

CVE-2018-6560

It was found that flatpak's D-Bus proxy did not properly filter the access to D-Bus during the authentication protocol. A specially crafted flatpak application could use this flaw to bypass all restrictions imposed by flatpak and have full access to the D-BUS interface...

CVE-2018-6560

In dbus-proxy/flatpak-proxy.c in Flatpak before 0.8.9, and 0.9.x and 0.10.x before 0.10.3, crafted D-Bus messages to the host can be used to break out of the sandbox, because whitespace handling in the proxy is not identical to whitespace handling in the daemon...