Lucene search
K

11 matches found

Nuclei
Nuclei
added 16 hours ago21 views

Joomla! Component & Plugin JE Tooltip 1.0 - Local File Inclusion

A directory traversal vulnerability in the JE Form Creator comjeformcr component for Joomla!, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via directory traversal sequences in the view parameter to index.php. NOTE -- the original researcher states that the...

4.3CVSS5.7AI score0.02036EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2010-1247

Malware in sbrugna...

4.3CVSS6.4AI score0.02036EPSS
Exploits1References6
CNVD
CNVD
added 2017/02/16 12:0 a.m.1 views

Joomla JE Form Creator Component SQL Injection Vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the Joomla JE Form Creator component, which can be exploited by attackers to access or modify database data...

8AI score
Exploits0References1
Packet Storm
Packet Storm
added 2017/02/14 12:0 a.m.42 views

Joomla JE Form Creator 1.8 SQL Injection

Exploit Title: Joomla! Component JE Form Creator v1.8 - SQL Injection Google Dork: inurl:index.php?option=comjeformcr Date: 13.02.2017 Vendor Homepage: http://www.joomlaextension.biz/ Software Buy: https://extensions.joomla.org/extensions/extension/contacts-and-feedback/forms/je-form-creator/ Dem...

0.2AI score
Exploits0
0day.today
0day.today
added 2017/02/14 12:0 a.m.39 views

Joomla JE Form Creator 1.8 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component JE Form Creator v1.8 - SQL Injection Google Dork: inurl:index.php?option=comjeformcr Date: 13.02.2017 Vendor Homepage: http://www.joomlaextension.biz/ Software Buy:...

7.4AI score
Exploits0
exploitpack
exploitpack
added 2017/02/13 12:0 a.m.13 views

Joomla! Component JE Form Creator 1.8 - Itemid SQL Injection

Joomla! Component JE Form Creator 1.8 - Itemid SQL Injection Exploit Title: Joomla! Component JE Form Creator v1.8 - SQL Injection Google Dork: inurl:index.php?option=comjeformcr Date: 13.02.2017 Vendor Homepage: http://www.joomlaextension.biz/ Software Buy:...

Exploits0
Exploit DB
Exploit DB
added 2017/02/13 12:0 a.m.37 views

Joomla! Component JE Form Creator 1.8 - 'Itemid' SQL Injection

Exploit Title: Joomla! Component JE Form Creator v1.8 - SQL Injection Google Dork: inurl:index.php?option=comjeformcr Date: 13.02.2017 Vendor Homepage: http://www.joomlaextension.biz/ Software Buy: https://extensions.joomla.org/extensions/extension/contacts-and-feedback/forms/je-form-creator/ Dem...

7.4AI score
Exploits0
Prion
Prion
added 2010/03/30 11:30 p.m.14 views

Directory traversal

Directory traversal vulnerability in the JE Form Creator comjeformcr component for Joomla!, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via directory traversal sequences in the view parameter to index.php. NOTE: the original researcher states that the affected...

4.3CVSS7.1AI score0.02036EPSS
Exploits1References5
Cvelist
Cvelist
added 2010/03/30 11:0 p.m.16 views

CVE-2010-1217

Directory traversal vulnerability in the JE Form Creator comjeformcr component for Joomla!, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via directory traversal sequences in the view parameter to index.php. NOTE: the original researcher states that the affected...

6.6AI score0.02036EPSS
Exploits1References5
CVE
CVE
added 2010/03/30 11:0 p.m.83 views

CVE-2010-1217

The connected Nuclei template confirms CVE-2010-1217 relates to Joomla! components JE Form Creator (com_jeformcr) and potentially JE Tooltip, with a directory traversal (Local File Inclusion) leading to reading arbitrary files via the view parameter to index.php when magic_quotes_gpc is disabled....

4.3CVSS6.8AI score0.02036EPSS
Exploits1References5Affected Software1
securityvulns
securityvulns
added 2007/06/01 12:0 a.m.45 views

static XSS / SQL-Injection in Omegasoft Insel

Input passed to fields in OmegaMw7's tables isn't properly sanitized before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site and/or inject SQL-Commands This applies to many many standard fields i...

0.4AI score
Exploits0
Rows per page
Query Builder