CVE-2016-1000120

SQLi and XSS in Huge IT catalog extension v1.0.4 for Joomla...

Sql injection

SQLi and XSS in Huge IT catalog extension v1.0.4 for Joomla...

CVE-2016-1000120

SQLi and XSS in Huge IT catalog extension v1.0.4 for Joomla...

CVE-2016-1000119

The CVE-2016-1000119 entry concerns the Huge IT Joomla Catalog Extension 1.0.4 for Joomla. Public details describe two vulnerabilities: a SQL Injection and a Reflected Cross-Site Scripting (XSS). The SQLi occurs in the submissions model (id parameter) and the XSS in the submissions view (message_...

Huge IT Joomla Catalog Extension 1.0.4 XSS / SQL Injection

Title: Reflected SQLi and XSS in Huge IT catalog extension v1.0.4 for Joomla Author: Larry W. Cashdollar, @larry0 Date: 2015-07-17 Download Site: http://extensions.joomla.org/extensions/extension/e-commerce/shopping-cart/catalog Vendor: www.huge-it.com Vendor Notified: 2015-07-17 Vendor Contact:...