9 matches found
CVE-2011-2509
Multiple cross-site scripting XSS vulnerabilities in Joomla! before 1.6.4 allow remote attackers to inject arbitrary web script or HTML via 1 the query string to the comcontact component, as demonstrated by the Itemid parameter to index.php; 2 the query string to the comcontent component, as...
Joomla! component com_newsfeeds 'feedid' SQL injection vulnerability
Joomla! is an open source, cross-platform content management system CMS developed using PHP and MySQL. A SQL injection vulnerability exists in the Joomla! component comnewsfeeds 'feedid'. An attacker can exploit this vulnerability to execute illegal SQL commands...
Joomla com_newsfeeds 1.0 Component - (feedid) SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Joomla! Component comnewsfeeds 1.0 - 'feedid' SQL Injection Author: Milad Karimi Software Link: Version: Category : webapps Tested on: windows 10 , firefox CVE : CWE-89 Dork: inurl:index.php?option=comnewsfeeds...
Joomla! Component com_newsfeeds 1.0 - 'feedid' SQL Injection
Exploit Title: Joomla! Component comnewsfeeds 1.0 - 'feedid' SQL Injection Date: 2020-03-10 Author: Milad Karimi Software Link: Version: Category : webapps Tested on: windows 10 , firefox CVE : CWE-89 Dork: inurl:index.php?option=comnewsfeeds...
Joomla! 2.5.x < 2.5.16 / 3.x < 3.1.6 Multiple XSS
According to its self-reported version number, the Joomla! installation running on the remote web server is 2.5.x prior to 2.5.16 or 3.x prior to 3.1.6. It is, therefore, affected by multiple cross-site XSS scripting vulnerabilities, related to the comcontact, comweblinks, and comnewsfeeds...
[20131102] Core XSS Vulnerability
Inadequate filtering leads to XSS vulnerability in comcontact, comweblinks, comnewsfeeds...
CVE-2011-2509
Multiple cross-site scripting XSS vulnerabilities in Joomla! before 1.6.4 allow remote attackers to inject arbitrary web script or HTML via 1 the query string to the comcontact component, as demonstrated by the Itemid parameter to index.php; 2 the query string to the comcontent component, as...
CVE-2010-1739
CVE-2010-1739 concerns a SQL injection vulnerability in Joomla!’s Newsfeeds extension (com_newsfeeds). The issue is exploitable through the feedid parameter in a categories action to index.php, allowing remote attackers to execute arbitrary SQL commands. The description is consistently reported a...
Joomla Component com_newsfeeds SQL injection vulnerability
Exploit for php platform in category web applications ========================================================== Joomla Component comnewsfeeds SQL injection vulnerability ========================================================== Exploit Title: Joomla Component comnewsfeeds SQL injection...