Joomla Component com_listing SQL Injection (CVE-2011-4830)

An SQL injection vulnerability has been reported in Joomla Com Listing. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

CVE-2011-4830

The CVE-2011-4830 issue covers Joomla! Barter Sites component “com_listing” (1.3) with multiple XSS vulnerabilities affecting parameters listed in index.php (listing_title, description, homeurl, paystring, sell_price, shipping_cost, quantity). Connected OpenVAS entries also indicate an SQL Inject...

CVE-2011-4830: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the comlisting component in Barter Sites component 1.3 for Joomla! allow remote authenticated users to inject arbitrary web script or HTML via the 1 listingtitle, 2 description, 3 homeurl aka Website Address, 4 paystring aka Payment types...

CVE-2011-4829: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the comlisting component in Barter Sites component 1.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the categoryid parameter to index.php...

Joomla! Barter Sites 'com_listing' Component 'category_id' Parameter SQL Injection Vulnerability

This host is running Joomla! Barter Sites component and is prone to SQL injection vulnerability. OpenVAS Vulnerability Test $Id: gbjoomlabartersitescategoryidparamsqlinjvuln.nasl 7015 2017-08-28 11:51:24Z teissa $ Joomla! Barter Sites 'comlisting' Component 'categoryid' Parameter SQL Injection...