CVE-2015-7324

CVE-2015-7324 concerns the StackIdeas Komento (com_komento) Joomla! component, prior to version 2.0.5. The vulnerability arises in helpers/comment.php where remote attackers can inject arbitrary HTML/script via the (1) img or (2) url tag when posting a new comment, constituting a cross-site scrip...

CVE-2014-1837

CVE-2014-1837 describes a cross-site scripting (XSS) vulnerability in the StackIdeas Komento (com_komento) component for Joomla! prior to version 1.7.4. The issue allows remote attackers to inject arbitrary web script or HTML via vectors related to adding or checking new comments. The NVD entry i...

Joomla Component com_komento Sql injection vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla component komento Sql Inection Vulnerability Google Dork:inurl:component/komento/ Date: 08/24/2012 Author: Crim3R Vendor Home : http://stackideas.com/komento.html Tested on: all $ $ Author will be not responsible for any...