CVE-2015-7715

The CVE covers a CSRF vulnerability in Realtyna RPL (com_rpl) for Joomla!, affecting versions prior to 8.9.5. The issue allows an attacker to hijack an administrator’s session by triggering an add_user action via administrator/index.php, enabling remote user creation without proper authorization....

CVE-2015-7714: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in the Realtyna RPL comrpl component before 8.9.5 for Joomla! allow remote administrators to execute arbitrary SQL commands via the 1 id, 2 copyfield in a datacopy action, 3 pshow in an updatefield action, 4 css, 5 tip, 6 catid, 7 textsearch, 8 plisting, or ...

CVE-2015-7715: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the Realtyna RPL comrpl component before 8.9.5 for Joomla! allows remote attackers to hijack the authentication of administrators for requests that add a user via an adduser action to administrator/index.php...

Joomla com_rpl SQL injection Vulnerability

No description provided by source...

Joomla Component com_rpl SQL Injection

SQL Injection vulnerability in Joomla Component comrpl pid parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

Component realtyna SQL Injection Vulnerability in Joomla!

Joomla! is an open source content management system CMS. A SQL injection vulnerability exists in the Joomla! component realtyna, which allows remote attackers to execute arbitrary SQL commands with the help of the pid parameter in the comrpl operation of index.php...