2907 matches found
CVE-2018-17376
SQL Injection exists in the Reverse Auction Factory 4.3.8 component for Joomla! via the filterorderDir, cat, or filterletter parameter...
Sql injection
SQL Injection exists in the Penny Auction Factory 2.0.4 component for Joomla! via the filterorderDir or filterorder parameter...
Sql injection
SQL Injection exists in the Social Factory 3.8.3 component for Joomla! via the radiuslat, radiuslng, or radiusradius parameter...
Sql injection
SQL Injection exists in the Swap Factory 2.2.1 component for Joomla! via the filterorderDir or filterorder parameter...
Sql injection
SQL Injection exists in the Reverse Auction Factory 4.3.8 component for Joomla! via the filterorderDir, cat, or filterletter parameter...
Sql injection
SQL Injection exists in the Collection Factory 4.1.9 component for Joomla! via the filterorder or filterorderDir parameter...
Sql injection
SQL Injection exists in the Article Factory Manager 4.3.9 component for Joomla! via the startdate, mstartdate, or menddate parameter...
Sql injection
SQL Injection exists in the Raffle Factory 3.5.2 component for Joomla! via the filterorderDir or filterorder parameter...
Sql injection
SQL Injection exists in the Jobs Factory 2.0.4 component for Joomla! via the filterletter parameter...
CVE-2018-17383
SQL Injection exists in the Collection Factory 4.1.9 component for Joomla! via the filterorder or filterorderDir parameter...
CVE-2018-17379
CVE-2018-17379 affects the Joomla! Raffle Factory 3.5.2 component, exposing a SQL Injection vulnerability via the filter_order_Dir and filter_order parameters. This allows an attacker to manipulate SQL queries, potentially impacting confidentiality, integrity, and availability (per CVSS metrics)....
CVE-2018-17378
SQL Injection exists in the Penny Auction Factory 2.0.4 component for Joomla! via the filterorderDir or filterorder parameter...
CVE-2018-17376
CVE-2018-17376 affects Joomla! Reverse Auction Factory 4.3.8; SQL injection via filter_order_Dir, cat, or filter_letter in listauctions. Public exploits exist (Exploit-DB) and the CVSS v3 base score is 9.8 (CRITICAL). No patch/version remediation details are provided in the supplied documents.
CVE-2018-17380
CVE-2018-17380 affects Joomla! Article Factory Manager 4.3.9. The vulnerability is a SQL Injection in the Article Factory Manager component, exploitable via the start_date, m_start_date, or m_end_date parameters in the affected extension. Root cause: unsafely constructed SQL queries derived from ...
CVE-2018-17383
CVE-2018-17383 concerns a SQL Injection in the Joomla! component “Collection Factory” version 4.1.9. The vulnerability is triggered via user-controllable inputs in the query path, specifically the parameters filter_order and filter_order_Dir , allowing an attacker to manipulate SQL commands execu...
CVE-2018-17384
CVE-2018-17384 affects Joomla! Swap Factory 2.2.1. The vulnerability is a SQL Injection in the Swap Factory component, exploitable via the filter_order_Dir and filter_order parameters, allowing an attacker to manipulate database queries. Root cause is unsafe handling of user input in the affected...
CVE-2018-17384
SQL Injection exists in the Swap Factory 2.2.1 component for Joomla! via the filterorderDir or filterorder parameter...
CVE-2018-17382
CVE-2018-17382 affects Joomla! Jobs Factory 2.0.4 via SQL Injection in the filter_letter parameter. The vulnerability is confirmed by multiple sources (NVD entry and third-party advisories) and is rated high/critical (CVSS v2 base 7.5, CVSS v3 base 9.8). Exploit references exist (Exploit-DB, Pack...