Joomla Jumi 3.0.5 Database Disclosure / SQL Injection

Exploit Title : Joomla Jumi Components 3.0.5 SQL Injection / Database Disclosure / Remote File Upload Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 05/02/2019 Vendor Homepage : 2glux.com Software Download Link :...

CVE-2009-2102

SQL injection vulnerability in the Jumi comjumi component 2.0.3 and possibly other versions for Joomla allows remote attackers to execute arbitrary SQL commands via the fileid parameter to index.php...

CVE-2009-2102

The CVE relates to the Jumi (com_jumi) Joomla extension, specifically version 2.0.3 and possibly earlier/newer ones. The underlying issue is an SQL injection in the fileid parameter of index.php, allowing an unauthenticated, remote attacker to manipulate database queries and potentially disclose ...