Joomla! 1.5 & 1.6 - JFilterInput XSS Bypass

No description provided by source. Exploit Title: Joomla! JFilterInput XSS Bypass Date: 1 February 2011 Author: Jeff Channell Software Link: http://www.joomla.org Version: 1.5.22, 1.6.0 Tested on: PHP5, MySQL5 Joomla! 1.5 and 1.6 rely on the JFilterInput class to sanitize user-supplied html. This...

Joomla! AWDwall Components SQL Injection and Local File Inclusion Vulnerabilities

No description provided by source. Some vulnerabilities have been reported in the AWDwall component for Joomla!, which can be exploited by malicious people to disclose sensitive information and conduct SQL injection attacks. 1 Input passed via the "cbuser" parameter to index.php if "option" is se...