Joomla Zoo By YooTheme 3.3.10 Database Disclosure / SQL Injection

Exploit Title : Joomla Zoo by YooTheme Components 3.3.10 SQL Injection / Database Disclosure Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 30/01/2019 Vendor Homepage : yootheme.com Software Download Link : yootheme.com/zoo Software Information Link :...

Joomla JUserTube 8.3.1 SQL Injection

Exploit Title : Joomla JUserTube Components 8.3.1 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 31/01/2019 Vendor Homepage : srizon.com Software Download Link : srizon.com/product/jusertube/ Software Information Link :...

Joomla JooMap 2.0.6 SQL Injection

Exploit Title : Joomla JooMap Components 2.0.6 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 30/01/2019 Vendor Homepage : joomlacode.org Software Download Link : joomlacode.org/gf/download/frsrelease/3734/8340/joomap2.06pre.zip Software Informati...

Joomla Rokin RokGallery 3.2.6 SQL Injection

Exploit Title : Joomla Rokin RokGallery Components 3.2.6 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 31/01/2019 Vendor Homepage : rockettheme.com Software Download Link : rockettheme.com/joomla/extensions/rokgallery Software Information Link :...

Joomla Formularz 1.0.2 SQL Injection

Exploit Title : Joomla Formularz Components 1.0.2 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 31/01/2019 Vendor Homepage : joomla.pl Software Download Link : joomla.pl/zasoby/na-twoja-witryne/formularz-w-5-minut Software Version : 1.0.2 Tested ...

Joomla HWDVideoShare 1.5 Bypass / Database Disclosure / SQL Injection

Exploit Title : Joomla HWDVideoShare Components 1.5 SQL Injection / Database Disclosure / Incorrect Authorization Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 30/01/2019 Vendor Homepage : joomla.org hwdmediashare.co.uk Software Download Link :...

Joomla MorfeoShow 1.2.0 SQL Injection

Exploit Title : Joomla MorfeoShow Components 1.2.0 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 31/01/2019 Vendor Homepage : joomla4ever.org Software Download Link : joomla4ever.org/archive/ext/commorfeoshow.zip Software Information Link :...

Joomla HotelGuide 1.0 SQL Injection

Exploit Title : Joomla HotelGuide Components 1.0 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 30/01/2019 Vendor Homepage : joomla4ever.org Software Download Link : joomla4ever.org/archive/ext/comhotelguide.zip Software Information Link :...

Joomla JCalPro Calendar 4.3.26 SQL Injection

Exploit Title : Joomla JCalPro Calendar Components 4.3.26 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 31/01/2019 Vendor Homepage : joomlashack.com anything-digital.com Software Download Link : joomlashack.com/joomla-extensions/jcal/ Software...

Joomla XMap 2.3.0 Database Disclosure / SQL Injection

Exploit Title : Joomla XMap Components 2.3.0 SQL Injection / Database Disclosure Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 30/01/2019 Vendor Homepage : joomla.org Software Download Links : joomla4ever.org/archive/ext/comxmap.zip...

Joomla SimplestForum 1.5 SQL Injection

Exploit Title : Joomla SimplestForum Components 1.5 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 31/01/2019 Vendor Homepage : joomlacode.org simplestforum.org Software Download Link :...

Joomla JEvents 3.4.47 SQL Injection

Exploit Title : Joomla JEvents Components 3.4.47 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 31/01/2019 Vendor Homepage : jevents.net Software Download Link : jevents.net/download-area/jevents Software Information Link :...

WordPress Snax 4.9.x SQL Injection

Exploit Title : WordPress Snax Plugins 4.9.x SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 28/01/2019 Vendor Homepage : snax.bringthepixel.com Software Information Link : codecanyon.net/item/snax-viral-frontend-uploader/16540363 Software Version ...

WordPress Diamond MultiSite Widgets 1.8.2 SQL Injection

Exploit Title : WordPress Diamond MultiSite Widgets Plugins 1.8.2 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 28/01/2019 Vendor Homepage : amegrant.com Software Download Link : downloads.wordpress.org/plugin/diamond-multisite-widgets.1.8.2.zip...

WordPress Advanced Custom Fields Pro 5.7.10 SQL Injection

Exploit Title : WordPress Advanced Custom Fields Pro Plugins 5.7.10 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 28/01/2019 Vendor Homepage : advancedcustomfields.com/pro/ Software Download Link :...

WordPress PT-Content-Views-Pro 2.1.2 SQL Injection

Exploit Title : WordPress PT-Content-Views-Pro Plugins 2.1.2 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 28/01/2019 Vendor Homepage : contentviewspro.com Software Download Link :...

WordPress Popup Builder Gold 3.1.5.2 SQL Injection

Exploit Title : WordPress Popup Builder Gold Plugins 3.1.5.2 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 28/01/2019 Vendor Homepage : popup-builder.com Software Download Link : downloads.wordpress.org/plugin/popup-builder.3.1.5.2.zip Software...

WordPress Yeloni Free Exit Popup 8.1.9 SQL Injection

Exploit Title : WordPress Yeloni Free Exit Popup Plugins 8.1.9 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 28/01/2019 Vendor Homepage : yeloni.com Software Download Link : downloads.wordpress.org/plugin/yeloni-free-exit-popup.zip Software...

WordPress Add Code To Head upsite_analytics_plugin 1.13 SQL Injection

Exploit Title : WordPress Add Code To Head upsiteanalyticsplugin Plugins 1.13 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 28/01/2019 Vendor Homepage : hbjitney.com Software Download Link : downloads.wordpress.org/plugin/add-code-to-head.zip...

SQL injection in Designer feature

PMASA-2019-2 Announcement-ID: PMASA-2019-2 Date: 2019-01-22 Summary SQL injection in Designer feature Description A vulnerability was reported where a specially crafted username can be used to trigger an SQL injection attack through the designer feature. Severity We consider this vulnerability to...