Joomla Catalog 1.0.7 Component - SQL Injection Vulnerability

Exploit for php platform in category web applications Title: Unauthenticated SQL Injection in Huge-IT Catalog v1.0.7 for Joomla Author: Larry W. Cashdollar, @larry0 Date: 2016-09-16 Download Site: http://huge-it.com/joomla-catalog/ Vendor: huge-it.com Vendor Notified: 2016-09-17 Vendor Contact:...

WordPress Huge IT Portfolio Gallery 2.0.77 Cross Site Scripting

------------------------------------------------------------------------ Cross-Site Scripting in Huge IT Portfolio Gallery WordPress Plugin ------------------------------------------------------------------------ Antonis Manaras, July 2016...

CVE-2016-1000122

XSS and SQLi in Huge IT Joomla Slider v1.0.9 extension...

CVE-2016-1000121

XSS and SQLi in Huge IT Joomla Slider v1.0.9 extension...

Cross site scripting

XSS and SQLi in Huge IT Joomla Slider v1.0.9 extension...

CVE-2016-1000120

SQLi and XSS in Huge IT catalog extension v1.0.4 for Joomla...

Sql injection

SQLi and XSS in Huge IT catalog extension v1.0.4 for Joomla...

CVE-2016-1000121

CVE-2016-1000121 affects the Huge IT Joomla Slider extension v1.0.9. The connected documents describe reflected XSS and SQL Injection vulnerabilities in the component, arising from inadequate input filtering in the extension’s admin code paths (notably in the slider manager and related PHP files)...

CVE-2016-1000122

The CVE-2016-1000122 entry describes XSS and SQL injection in the Huge IT Joomla Slider v1.0.9 extension. Connected sources corroborate affected functionality in the admin area: XSS via id parameter in ./admin/views/slider/tmpl/default.php and SQL injection in ./admin/models/slider.php. The root ...

CVE-2016-1000122

XSS and SQLi in Huge IT Joomla Slider v1.0.9 extension...

CVE-2016-1000120

SQLi and XSS in Huge IT catalog extension v1.0.4 for Joomla...

CVE-2016-1000120

CVE-2016-1000120 affects Joomla's Huge IT Catalog extension (v1.0.4). The connected sources confirm SQL injection and cross-site scripting vulnerabilities in the catalog component caused by inadequate validation of user-submitted input. Potential impact, as described in CNVD, includes arbitrary s...

CVE-2016-1000119

SQLi and XSS in Huge IT catalog extension v1.0.4 for Joomla...

CVE-2016-1000119

SQLi and XSS in Huge IT catalog extension v1.0.4 for Joomla...

CVE-2016-1000116

Huge-IT Portfolio Gallery manager v1.1.0 SQL Injection and XSS...

CVE-2016-1000116

Huge-IT Portfolio Gallery manager v1.1.0 SQL Injection and XSS...

CVE-2016-1000115

Huge-IT Portfolio Gallery manager v1.1.0 SQL Injection and XSS...

Sql injection

Huge-IT Portfolio Gallery manager v1.1.0 SQL Injection and XSS...

Sql injection

Huge-IT Portfolio Gallery manager v1.1.0 SQL Injection and XSS...

CVE-2016-1000115

CVE-2016-1000115 affects Huge-IT Portfolio Gallery Manager for Joomla!, specifically version 1.1.0, with confirmed SQL Injection and XSS. The NVD entry lists a base score of 6.5 (MEDIUM) CVSS2 and 7.2 (HIGH) CVSS3, indicating potential client-side and server-side impact and network-exploitability...