CVE-2016-1000120

SQLi and XSS in Huge IT catalog extension v1.0.4 for Joomla...

CVE-2016-1000120

SQLi and XSS in Huge IT catalog extension v1.0.4 for Joomla...

CVE-2016-1000120

CVE-2016-1000120 affects Joomla's Huge IT Catalog extension (v1.0.4). The connected sources confirm SQL injection and cross-site scripting vulnerabilities in the catalog component caused by inadequate validation of user-submitted input. Potential impact, as described in CNVD, includes arbitrary s...