9770 matches found
CVE-2018-6582
SQL Injection exists in the Zh GoogleMap 8.4.0.0 component for Joomla! via the id parameter in a getPlacemarkDetails, getPlacemarkHoverText, getPathHoverText, or getPathDetails request...
Sql injection
SQL Injection exists in the Zh BaiduMap 3.0.0.1 component for Joomla! via the id parameter in a getPlacemarkDetails, getPlacemarkHoverText, getPathHoverText, or getPathDetails request...
CVE-2018-6604: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection exists in the Zh YandexMap 6.2.1.0 component for Joomla! via the id parameter in a task=getPlacemarkDetails request...
CVE-2018-6605: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection exists in the Zh BaiduMap 3.0.0.1 component for Joomla! via the id parameter in a getPlacemarkDetails, getPlacemarkHoverText, getPathHoverText, or getPathDetails request...
PT-2018-17646
Name of the Vulnerable Software and Affected Versions Joomla! Zh GoogleMap version 8.4.0.0 Description The issue exists due to SQL Injection in the Zh GoogleMap component for Joomla!. This occurs via the id parameter in specific requests, including "getPlacemarkDetails", "getPlacemarkHoverText",...
PT-2018-17663
Name of the Vulnerable Software and Affected Versions Joomla! component Zh YandexMap version 6.2.1.0 Description The issue exists due to SQL Injection in the Zh YandexMap component for Joomla!. This occurs via the id parameter in a "task=getPlacemarkDetails" request. Recommendations For version...
PT-2018-17664
Name of the Vulnerable Software and Affected Versions Joomla! Zh BaiduMap component version 3.0.0.1 Description The issue exists due to SQL Injection in the Zh BaiduMap component for Joomla!. This occurs via the id parameter in specific requests, including getPlacemarkDetails,...
CVE-2018-6582: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection exists in the Zh GoogleMap 8.4.0.0 component for Joomla! via the id parameter in a getPlacemarkDetails, getPlacemarkHoverText, getPathHoverText, or getPathDetails request...
CVE-2018-6576
SQL Injection exists in Event Manager 1.0 via the event.php id parameter or the page.php slug parameter...
CVE-2018-6576: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection exists in Event Manager 1.0 via the event.php id parameter or the page.php slug parameter...
Task Rabbit Clone SQL Injection Vulnerability
Task Rabbit Clone is a set of PHP-based scripts for online service marketplace websites. A SQL injection vulnerability exists in Task Rabbit Clone version 1.0. A remote attacker can inject SQL commands by sending the 'id' parameter to the singleblog.php file...
CVE-2018-6398
SQL Injection exists in the CP Event Calendar 3.0.1 component for Joomla! via the id parameter in a task=load action...
Sql injection
SQL Injection exists in the CP Event Calendar 3.0.1 component for Joomla! via the id parameter in a task=load action...
CVE-2018-6395
SQL Injection exists in the Visual Calendar 3.1.3 component for Joomla! via the id parameter in a view=load action...
PT-2018-17530
Name of the Vulnerable Software and Affected Versions Joomla! Visual Calendar version 3.1.3 Description A SQL Injection issue exists in the Visual Calendar component for Joomla!. This issue is exploitable via the id parameter in a "view=load" action. Recommendations For version 3.1.3, avoid using...
PT-2018-17533
Name of the Vulnerable Software and Affected Versions Joomla! CP Event Calendar version 3.0.1 Description A SQL Injection issue exists in the CP Event Calendar component for Joomla!. This issue is exploitable via the id parameter in a "task=load" action. Recommendations For version 3.0.1, avoid...
CVE-2018-6398: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection exists in the CP Event Calendar 3.0.1 component for Joomla! via the id parameter in a task=load action...
CVE-2018-6395: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection exists in the Visual Calendar 3.1.3 component for Joomla! via the id parameter in a view=load action...