CVE-2010-2680

The CVE-2010-2680 issue affects Joomla! via the JExtensions JE Section/Property Finder (jesectionfinder) component, described as a directory traversal (Local File Inclusion) vulnerability. An attacker can exploit the view parameter to index.php to include and execute arbitrary local files. Exploi...

CVE-2010-2680

Directory traversal vulnerability in the JExtensions JE Section/Property Finder jesectionfinder component for Joomla! allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the view parameter to index.php...

CVE-2010-2613

The CVE-2010-2613 entry documents a Cross-site Scripting (XSS) vulnerability in Joomla! that affects the JExtensions JE Awd Song component (com_awd_song). The issue arises in the song review field and is not properly handled in the view action to index.php, enabling remote attackers to inject arb...

Joomla JE Event Calendar Local File Inclusion

================================================ Joomla jeeventcalenda LFI Vulnerability ================================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //...

CVE-2010-2513

CVE-2010-2513 describes a SQL injection in the Joomla! component JE Ajax Event Calendar (com_jeajaxeventcalendar) version 1.0.5. The vulnerability allows remote attackers to execute arbitrary SQL commands by supplying a crafted value to the view parameter in index.php. This is a server-side datab...

CVE-2010-2513

SQL injection vulnerability in the JE Ajax Event Calendar comjeajaxeventcalendar component 1.0.5 for Joomla! allows remote attackers to execute arbitrary SQL commands via the view parameter to index.php...

Joomla Component JE Story Submit SQL Injection Vulnerability

No description provided by source. Exploit Title: Joomla JE Story submit SQL Injection Vendor url:http://joomlaextensions.co.in Version:1.4 Greetz to:r0073r inj3ct0r.com, Sid3^effects, MaYur, MA1201, Sonic Bluehat, Sai, KD, M4n0j. Special Greetz: Topsecure.net, inj3ct0r Team ,Andhrahackers.com...

Joomla! Component JE Awd Song - Persistent Cross-Site Scripting

Joomla! Component JE Awd Song - Persistent Cross-Site Scripting Critical Level : HIGH Vendor Url : http://joomlaextensions.co.in/component/awdsong/ Google Dork: inurl:comawdsong Price:$37.00 Author : Sid3^effects aKa HaRi special thanks to : r0073r inj3ct0r.com,L0rd...

Joomla Component com_jejob SQL Injection Vulnerability

Exploit for php platform in category web applications ====================================================== Joomla Component comjejob SQL Injection Vulnerability ====================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 ...

Joomla! Component JE Media Player - Local File Inclusion

Joomla! Component JE Media Player - Local File Inclusion Name : Joomla je-media-player LFI Vulnerability Date : june, 26 2010 Critical Level : HIGH Vendor Url : http://joomlaextensions.co.in/extensions/components/je-media-player.html Google Dork: inurl:/components/je-media-player.html? Price:$15....

Joomla! Component JE Media Player - Local File Inclusion

Name : Joomla je-media-player LFI Vulnerability Date : june, 26 2010 Critical Level : HIGH Vendor Url : http://joomlaextensions.co.in/extensions/components/je-media-player.html Google Dork: inurl:/components/je-media-player.html? Price:$15.00 Author : Sid3^effects aKa HaRi special thanks to :...

Joomla JE Ajax Event Calendar SQL Injection Vulnerability

No description provided by source. Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Joomla JE Ajax event calendar SQL Vulnerable Version:1.0.5 Published: 2010-06-23 Greetz to:r0073r inj3ct0r.com, Sid3^effects, MaYur, MA1201, Sonic Bluehat. Special Greetz: Topsecure.net, inj3ct0r...

CVE-2010-2129

Directory traversal vulnerability in the JE Ajax Event Calendar comjeajaxeventcalendar component 1.0.1 and 1.0.3 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the view parameter to index.php. NOTE: some of these details are obtained from third party information...

Directory traversal

Directory traversal vulnerability in the JE Ajax Event Calendar comjeajaxeventcalendar component 1.0.1 and 1.0.3 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the view parameter to index.php. NOTE: some of these details are obtained from third party information...

Directory traversal

Directory traversal vulnerability in the JE Quotation Form comjequoteform component 1.0b1 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the view parameter to index.php...

CVE-2010-2128

Directory traversal vulnerability in the JE Quotation Form comjequoteform component 1.0b1 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the view parameter to index.php...

CVE-2010-2129

Directory traversal vulnerability in the JE Ajax Event Calendar comjeajaxeventcalendar component 1.0.1 and 1.0.3 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the view parameter to index.php. NOTE: some of these details are obtained from third party information...

CVE-2010-2129

CVE-2010-2129 is a directory traversal vulnerability in the Joomla! extension JE Ajax Event Calendar (com_jeajaxeventcalendar) versions 1.0.1 and 1.0.3, allowing remote attackers to read arbitrary files by supplying a .. in the view parameter to index.php. The issue arises from insufficient input...

Joomla JE Poll SQL Injection

/ / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID ----------------------------------------------------------------------- Joomla...

Joomla JE Job 1.0 SQL Injection

/ / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID ----------------------------------------------------------------------- Joomla...