CVE-2010-2513: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the JE Ajax Event Calendar comjeajaxeventcalendar component 1.0.5 for Joomla! allows remote attackers to execute arbitrary SQL commands via the view parameter to index.php...

Joomla Component JE Story Submit SQL Injection Vulnerability

No description provided by source. Exploit Title: Joomla JE Story submit SQL Injection Vendor url:http://joomlaextensions.co.in Version:1.4 Greetz to:r0073r inj3ct0r.com, Sid3^effects, MaYur, MA1201, Sonic Bluehat, Sai, KD, M4n0j. Special Greetz: Topsecure.net, inj3ct0r Team ,Andhrahackers.com...

Joomla! Component JE Media Player - Local File Inclusion

Name : Joomla je-media-player LFI Vulnerability Date : june, 26 2010 Critical Level : HIGH Vendor Url : http://joomlaextensions.co.in/extensions/components/je-media-player.html Google Dork: inurl:/components/je-media-player.html? Price:$15.00 Author : Sid3^effects aKa HaRi special thanks to :...

Joomla Component com_jejob SQL Injection Vulnerability

Exploit for php platform in category web applications ====================================================== Joomla Component comjejob SQL Injection Vulnerability ====================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 ...

Joomla! Component JE Awd Song - Persistent Cross-Site Scripting

Joomla! Component JE Awd Song - Persistent Cross-Site Scripting Critical Level : HIGH Vendor Url : http://joomlaextensions.co.in/component/awdsong/ Google Dork: inurl:comawdsong Price:$37.00 Author : Sid3^effects aKa HaRi special thanks to : r0073r inj3ct0r.com,L0rd...

Joomla! Component JE Media Player - Local File Inclusion

Joomla! Component JE Media Player - Local File Inclusion Name : Joomla je-media-player LFI Vulnerability Date : june, 26 2010 Critical Level : HIGH Vendor Url : http://joomlaextensions.co.in/extensions/components/je-media-player.html Google Dork: inurl:/components/je-media-player.html? Price:$15....

Joomla JE Ajax Event Calendar SQL Injection Vulnerability

No description provided by source. Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Joomla JE Ajax event calendar SQL Vulnerable Version:1.0.5 Published: 2010-06-23 Greetz to:r0073r inj3ct0r.com, Sid3^effects, MaYur, MA1201, Sonic Bluehat. Special Greetz: Topsecure.net, inj3ct0r...

CVE-2010-2129

Directory traversal vulnerability in the JE Ajax Event Calendar comjeajaxeventcalendar component 1.0.1 and 1.0.3 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the view parameter to index.php. NOTE: some of these details are obtained from third party information...

Directory traversal

Directory traversal vulnerability in the JE Quotation Form comjequoteform component 1.0b1 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the view parameter to index.php...

Directory traversal

Directory traversal vulnerability in the JE Ajax Event Calendar comjeajaxeventcalendar component 1.0.1 and 1.0.3 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the view parameter to index.php. NOTE: some of these details are obtained from third party information...

CVE-2010-2128

Directory traversal vulnerability in the JE Quotation Form comjequoteform component 1.0b1 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the view parameter to index.php...

CVE-2010-2129

CVE-2010-2129 is a directory traversal vulnerability in the Joomla! extension JE Ajax Event Calendar (com_jeajaxeventcalendar) versions 1.0.1 and 1.0.3, allowing remote attackers to read arbitrary files by supplying a .. in the view parameter to index.php. The issue arises from insufficient input...

CVE-2010-2129

Directory traversal vulnerability in the JE Ajax Event Calendar comjeajaxeventcalendar component 1.0.1 and 1.0.3 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the view parameter to index.php. NOTE: some of these details are obtained from third party information...

CVE-2010-2129: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the JE Ajax Event Calendar comjeajaxeventcalendar component 1.0.1 and 1.0.3 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the view parameter to index.php. NOTE: some of these details are obtained from third party information...

CVE-2010-2128: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the JE Quotation Form comjequoteform component 1.0b1 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the view parameter to index.php...

Joomla JE Poll SQL Injection

/ / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID ----------------------------------------------------------------------- Joomla...

Joomla JE Job 1.0 SQL Injection

/ / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID ----------------------------------------------------------------------- Joomla...

Joomla! Component JE Poll - pollid SQL Injection

Joomla! Component JE Poll - pollid SQL Injection / / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID...

Joomla! Component JE Job 1.0 - catid SQL Injection

Joomla! Component JE Job 1.0 - catid SQL Injection / / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID...

Joomla! Component JE Poll - 'pollid' SQL Injection

/ / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID ----------------------------------------------------------------------- Joomla...