29 matches found
EUVD-2020-6166
Malware in sbrugna...
EUVD-2015-6453
Malware in sbrugna...
CVE-2015-6513
Multiple SQL injection vulnerabilities in the J2Store comj2store extension before 3.1.7 for Joomla! allow remote attackers to execute arbitrary SQL commands via the 1 sortby or 2 manufacturerids parameter to index.php...
Joomla J2Store SQL Injection
An SQL injection vulnerability exists in Joomla J2Store. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...
J2Store plugin SQL Injection Vulnerability
Joomla! is the U.S. Open Source Matters team using PHP and MySQL development of a set of open source , cross-platform content management system CMS. J2Store plugin is used in one of the e-commerce plug-ins . A SQL injection vulnerability exists in Joomla! J2Store plugin versions prior to 3.3.13...
CVE-2020-13996
The J2Store plugin before 3.3.13 for Joomla! allows a SQL injection attack by a trusted store manager...
CVE-2020-13996
The J2Store plugin before 3.3.13 for Joomla! allows a SQL injection attack by a trusted store manager...
Sql injection
The J2Store plugin before 3.3.13 for Joomla! allows a SQL injection attack by a trusted store manager...
CVE-2020-13996
The J2Store plugin before 3.3.13 for Joomla! allows a SQL injection attack by a trusted store manager...
CVE-2020-13996
The CVE concerns the J2Store Joomla! plugin prior to version 3.3.13. A SQL injection vulnerability exists in J2Store’s database handling due to lack of validation of externally supplied SQL statements, exploitable by a trusted store manager. Affected component: J2Store plugin (Joomla!) before 3.3...
J2Store, 3.3.9. and previous,XSS (Cross Site Scripting)
J2Store,3.9.x,XSS Cross Site Scripting Update to 3.3.11 https://www.j2store.org/blog/general/j2store-3-3-11-released-with-improvements-and-a-security-fix.html...
Joomla J2Store SQL Injection
Exploit Title: J2Store Plugin for Joomla! 3.3.6 - SQL Injection Date: 19/02/2019 Author: Andrei Conache Twitter: @andreiconache Contact: andrei.conacheatprotonmail.com Software Link: https://www.j2store.org Version: 3.x-3.3.6 Tested on: Linux CVE: CVE-2019-9184 1. Description: J2Store is the most...
Joomla! Component J2Store < 3.3.7 - SQL Injection
Exploit Title: J2Store Plugin for Joomla! 3.3.6 - SQL Injection Date: 19/02/2019 Author: Andrei Conache Twitter: @andreiconache Contact: andrei.conacheatprotonmail.com Software Link: https://www.j2store.org Version: 3.x-3.3.6 Tested on: Linux CVE: CVE-2019-9184 1. Description: J2Store is the most...
Joomla! Component J2Store 3.3.7 - SQL Injection
Joomla! Component J2Store 3.3.7 - SQL Injection Exploit Title: J2Store Plugin for Joomla! 3.3.6 - SQL Injection Date: 19/02/2019 Author: Andrei Conache Twitter: @andreiconache Contact: andrei.conacheatprotonmail.com Software Link: https://www.j2store.org Version: 3.x-3.3.6 Tested on: Linux CVE:...
Joomla J2Store < 3.3.7 Component - SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: J2Store Plugin for Joomla! 3.3.6 - SQL Injection Author: Andrei Conache Twitter: @andreiconache Contact: andrei.conacheatprotonmail.com Software Link: https://www.j2store.org Version: 3.x-3.3.6 Tested on: Linux CVE: CVE-2019-918...
Sql injection
SQL injection vulnerability in the J2Store plugin 3.x before 3.3.7 for Joomla! allows remote attackers to execute arbitrary SQL commands via the productoption parameter...
CVE-2019-9184
SQL injection vulnerability in the J2Store plugin 3.x before 3.3.7 for Joomla! allows remote attackers to execute arbitrary SQL commands via the productoption parameter...
CVE-2019-9184
SQL injection vulnerability in the J2Store plugin 3.x before 3.3.7 for Joomla! allows remote attackers to execute arbitrary SQL commands via the productoption parameter...
CVE-2019-9184
SQL injection vulnerability in the J2Store plugin 3.x before 3.3.7 for Joomla! allows remote attackers to execute arbitrary SQL commands via the productoption parameter...
CVE-2019-9184
CVE-2019-9184 affects the Joomla! J2Store plugin (versions prior to 3.3.7). The vulnerability is a SQL injection in the product_option[] parameter, allowing remote attackers to execute arbitrary SQL commands. Exploitation details in public reports reference the vulnerable parameter (product_optio...