CVE-2018-17378

The CVE-2018-17378 entry describes a SQL injection vulnerability in Joomla! Penny Auction Factory 2.0.4, exploitable via the filter_order_Dir or filter_order parameters. Affected component: Penny Auction Factory 2.0.4 for Joomla!. Root cause: unsanitized user input in query construction leading t...

CVE-2018-17385

CVE-2018-17385 affects the Joomla! Social Factory 3.8.3 component. The vulnerability is a SQL Injection in the Social Factory radius search endpoint, exploitable via the radius[lat], radius[lng], or radius[radius] parameters. Public references (Packet Storm, Exploit-DB, CVE lists) describe a craf...

CVE-2018-17383

CVE-2018-17383 concerns a SQL Injection in the Joomla! component “Collection Factory” version 4.1.9. The vulnerability is triggered via user-controllable inputs in the query path, specifically the parameters filter_order and filter_order_Dir , allowing an attacker to manipulate SQL commands execu...

CVE-2018-17384

CVE-2018-17384 affects Joomla! Swap Factory 2.2.1. The vulnerability is a SQL Injection in the Swap Factory component, exploitable via the filter_order_Dir and filter_order parameters, allowing an attacker to manipulate database queries. Root cause is unsafe handling of user input in the affected...

CVE-2018-17380

CVE-2018-17380 affects Joomla! Article Factory Manager 4.3.9. The vulnerability is a SQL Injection in the Article Factory Manager component, exploitable via the start_date, m_start_date, or m_end_date parameters in the affected extension. Root cause: unsafely constructed SQL queries derived from ...

CVE-2018-17379

CVE-2018-17379 affects the Joomla! Raffle Factory 3.5.2 component, exposing a SQL Injection vulnerability via the filter_order_Dir and filter_order parameters. This allows an attacker to manipulate SQL queries, potentially impacting confidentiality, integrity, and availability (per CVSS metrics)....

CVE-2018-17376: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in the Reverse Auction Factory 4.3.8 component for Joomla! via the filterorderDir, cat, or filterletter parameter...

PT-2018-13999

Name of the Vulnerable Software and Affected Versions Joomla! Reverse Auction Factory version 4.3.8 Description A SQL Injection issue exists in the Reverse Auction Factory component for Joomla!. This issue can be exploited via the filter order Dir, cat, or filter letter parameters. Recommendation...

CVE-2018-17378

SQL Injection exists in the Penny Auction Factory 2.0.4 component for Joomla! via the filterorderDir or filterorder parameter...

Social Factory SQL Injection Vulnerability in Joomla!

Joomla! is the United States Open Source Matters team developed a set of open source content management system CMS. A SQL injection vulnerability exists in the Social Factory component of Joomla! The vulnerability is caused by inserting SQL commands into the query string of a web form submission ...

Component Dutch Auction Factory 'filter_order_Dir' SQL Injection Vulnerability in Joomla!

Joomla! is the United States Open Source Matters team developed a set of open source content management system CMS. A SQL injection vulnerability exists in the Dutch Auction Factory 'filterorderDir' component of Joomla! An attacker can insert SQL commands into the query string of a web form...

Jobs Factory SQL Injection Vulnerability in Joomla!

Joomla! is the United States Open Source Matters team developed a set of open source content management system CMS. A SQL injection vulnerability exists in the Jobs Factory component of Joomla! The vulnerability is caused by inserting SQL commands into the query string of a web form submission or...

Component Auction Factory 'filter_order' SQL Injection Vulnerability in Joomla!

Joomla! is the United States Open Source Matters team developed a set of open source content management system CMS. A SQL injection vulnerability exists in the Joomla! component Auction Factory 'filterorder', which can be exploited by attackers to obtain sensitive database information...

Article Factory Manager SQL Injection Vulnerability in Joomla!

Joomla! is the United States Open Source Matters team developed a set of open source content management system CMS. A SQL injection vulnerability exists in the Article Factory Manager component of Joomla! The vulnerability is caused by inserting SQL commands into the query string of a web form...

Component Raffle Factory SQL Injection Vulnerability in Joomla!

Joomla! is the United States Open Source Matters team developed a set of open source content management system CMS. A SQL injection vulnerability exists in the Joomla! component Raffle Factory. The vulnerability is caused by inserting SQL commands into the query string of a web form submission or...

Penny Auction Factory SQL Injection Vulnerability in Joomla!

Joomla! is the United States Open Source Matters team developed a set of open source content management system CMS. A SQL injection vulnerability exists in the Penny Auction Factory component of Joomla! The vulnerability is caused by inserting SQL commands into the query string of a web form...

Component Reverse Auction Factory SQL Injection Vulnerability in Joomla!

Joomla! is the United States Open Source Matters team developed a set of open source content management system CMS. A SQL injection vulnerability exists in the Reverse Auction Factory component of Joomla! The vulnerability is caused by inserting SQL commands into the query string of a web form...

Component Collection Factory SQL Injection Vulnerability in Joomla!

Joomla! is the United States Open Source Matters team developed a set of open source content management system CMS. A SQL injection vulnerability exists in the Collection Factory component of Joomla! The vulnerability is caused by inserting SQL commands into the query string of a web form...

Component Swap Factory SQL Injection Vulnerability in Joomla!

Joomla! is the United States Open Source Matters team developed a set of open source content management system CMS. A SQL injection vulnerability exists in the Swap Factory component of Joomla! The vulnerability is caused by inserting SQL commands into the query string of a web form submission or...

Joomla! Auction Factory 4.5.5 SQL Injection

Exploit Title: Joomla! Component Auction Factory 4.5.5 - 'filterorder' SQL Injection Exploit Author: Ihsan Sencan Dork: N/A Date: 2018-09-24 Vendor Homepage: https://thephpfactory.com/ Software Link: https://extensions.joomla.org/extensions/extension/e-commerce/auction/auction-factory/ Version:...