CVE-2010-1217: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the JE Form Creator comjeformcr component for Joomla!, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via directory traversal sequences in the view parameter to index.php. NOTE: the original researcher states that the affected...

joomla component & plugin JE Tooltip Local File Inclusion

No description provided by source. --------------------------------------------------------------------------------- joomla component & plugin JE Tooltip Local File Inclusion --------------------------------------------------------------------------------- Author : Chip D3 Bi0s Group :...

Joomla JE Tooltip Local File Inclusion

--------------------------------------------------------------------------------- joomla component & plugin JE Tooltip Local File Inclusion --------------------------------------------------------------------------------- Author : Chip D3 Bi0s Group : LatinHackTeam Email & msn :...

Joomla Component com_jeformc JE Tooltip Local File Inclusion

Exploit for unknown platform in category web applications ============================================================ Joomla Component comjeformc JE Tooltip Local File Inclusion ============================================================...

Sql injection

SQL injection vulnerability in the JE Event Calendars comjeeventcalendar component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the eventid parameter in an event action to index.php...

Sql injection

SQL injection vulnerability in the JE Quiz comjequizmanagement component 1.b01 for Joomla! allows remote attackers to execute arbitrary SQL commands via the eid parameter in a question action to index.php...

CVE-2010-0796

SQL injection vulnerability in the JE Quiz comjequizmanagement component 1.b01 for Joomla! allows remote attackers to execute arbitrary SQL commands via the eid parameter in a question action to index.php...

CVE-2010-0795

SQL injection vulnerability in the JE Event Calendars comjeeventcalendar component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the eventid parameter in an event action to index.php...

CVE-2010-0795

SQL injection vulnerability in the JE Event Calendars comjeeventcalendar component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the eventid parameter in an event action to index.php...

CVE-2010-0796

SQL injection vulnerability in the JE Quiz comjequizmanagement component 1.b01 for Joomla! allows remote attackers to execute arbitrary SQL commands via the eid parameter in a question action to index.php...

CVE-2010-0796

The CVE-2010-0796 entry is a concrete SQL injection vulnerability in the Joomla! JE Quiz component (com_jequizmanagement) version 1.b01. The issue is triggered via the eid parameter in a question action to index.php, allowing remote attackers to execute arbitrary SQL commands. Affected software i...

CVE-2010-0796: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the JE Quiz comjequizmanagement component 1.b01 for Joomla! allows remote attackers to execute arbitrary SQL commands via the eid parameter in a question action to index.php...

CVE-2010-0795: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the JE Event Calendars comjeeventcalendar component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the eventid parameter in an event action to index.php...

Joomla Component JE Quiz Blind SQL Injection Vulnerability

No description provided by source. ...BEGIN ADVISORY... !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! TITLE: Joomla JE Quiz component BLIND SQL Injection Vulnerability LANGUAGE: PHP DORK: N/A RESEARCHER: B-HUNT3|2 CONTACT: bhunt3ratnospamgmaildotnospamcom TYPE:...

Joomla! Component JE Event Calendar - SQL Injection

Joomla! Component JE Event Calendar - SQL Injection ...BEGIN ADVISORY... !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! TITLE: Joomla JE Event Calendar SQL Injection Vulnerability LANGUAGE: PHP DORK: N/A RESEARCHER: B-HUNT3|2 CONTACT:...

Joomla Component JE Event Calendar SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================== Joomla Component JE Event Calendar SQL Injection Vulnerability ============================================================== ...BEGIN ADVISORY...

Joomla! Component JE Event Calendar - SQL Injection

...BEGIN ADVISORY... !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! TITLE: Joomla JE Event Calendar SQL Injection Vulnerability LANGUAGE: PHP DORK: N/A RESEARCHER: B-HUNT3|2 CONTACT: bhunt3ratnospamgmaildotnospamcom...

Joomla Component JE Quiz Blind SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================== Joomla Component JE Quiz Blind SQL Injection Vulnerability ========================================================== ...BEGIN ADVISORY...

Joomla JE Quiz Blind SQL Injection

...BEGIN ADVISORY... !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! TITLE: Joomla JE Quiz component BLIND SQL Injection Vulnerability LANGUAGE: PHP DORK: N/A RESEARCHER: B-HUNT3|2 CONTACT: bhunt3ratnospamgmaildotnospamcom TYPE: COMMERCIAL PRICE: $20.00 TESTED ON:...

Joomla! Component JE Quiz - eid Blind SQL Injection

Joomla! Component JE Quiz - eid Blind SQL Injection ...BEGIN ADVISORY... !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! TITLE: Joomla JE Quiz component BLIND SQL Injection Vulnerability LANGUAGE: PHP DORK: N/A RESEARCHER: B-HUNT3|2 CONTACT:...