PT-2017-7554

Name of the Vulnerable Software and Affected Versions AlegroCart version 1.2.8 Description The issue allows remote administrators to execute arbitrary SQL commands via the download parameter in the check download and possibly check filename function in upload/admin2/model/products/model admin...

CVE-2016-1000120

SQLi and XSS in Huge IT catalog extension v1.0.4 for Joomla...

Sql injection

SQLi and XSS in Huge IT catalog extension v1.0.4 for Joomla...

CVE-2016-1000120

SQLi and XSS in Huge IT catalog extension v1.0.4 for Joomla...

PT-2016-4512

Name of the Vulnerable Software and Affected Versions Huge IT catalog extension version 1.0.4 Description The issue concerns SQL injection SQLi and cross-site scripting XSS in the Huge IT catalog extension for Joomla. SQLi is a type of attack where an attacker injects malicious SQL code to...

CVE-2016-1000119

The CVE-2016-1000119 entry concerns the Huge IT Joomla Catalog Extension 1.0.4 for Joomla. Public details describe two vulnerabilities: a SQL Injection and a Reflected Cross-Site Scripting (XSS). The SQLi occurs in the submissions model (id parameter) and the XSS in the submissions view (message_...

CVE-2016-1000119: Improper Neutralization of Input During Web Page Generation

SQLi and XSS in Huge IT catalog extension v1.0.4 for Joomla...

PT-2016-4511

Name of the Vulnerable Software and Affected Versions Huge IT catalog extension version 1.0.4 Description The issue concerns SQL injection SQLi and cross-site scripting XSS in the Huge IT catalog extension for Joomla. SQLi is a type of attack where an attacker injects malicious SQL code to...

Huge IT Joomla Catalog Extension 1.0.4 XSS / SQL Injection

Title: Reflected SQLi and XSS in Huge IT catalog extension v1.0.4 for Joomla Author: Larry W. Cashdollar, @larry0 Date: 2015-07-17 Download Site: http://extensions.joomla.org/extensions/extension/e-commerce/shopping-cart/catalog Vendor: www.huge-it.com Vendor Notified: 2015-07-17 Vendor Contact:...