PT-2011-1957

Name of the Vulnerable Software and Affected Versions JExtensions JE Story Submit com jesubmit component version 1.4 for Joomla! Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the view parameter to the "index.php" API endpoint...

PT-2011-1963

Name of the Vulnerable Software and Affected Versions JExtensions JE Job com jejob component version 1.0 for Joomla! Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the catid parameter in an item action to "index.php". Recommendation...

CVE-2010-5022: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the JExtensions JE Story Submit comjesubmit component 1.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the view parameter to index.php...

CVE-2010-5028: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the JExtensions JE Job comjejob component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in an item action to index.php...

PT-2011-1797

Name of the Vulnerable Software and Affected Versions JExtensions JE Directory com jedirectory component version 1.0 for Joomla! Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the catid parameter in an item action to the "index.php"...

CVE-2010-4862: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the JExtensions JE Directory comjedirectory component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in an item action to index.php...

CVE-2010-4720

SQL injection vulnerability in the JExtensions JE Auto comjeauto component before 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via unspecified vectors related to the view item page...

Sql injection

SQL injection vulnerability in the JExtensions JE Auto comjeauto component before 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via unspecified vectors related to the view item page...

CVE-2010-4720

CVE-2010-4720 : The Joomla! extension JE Auto (com_jeauto) vulnerable to SQL injection before version 1.1. The underlying issue is a SQL injection vulnerability on the view item page, allowing remote attackers to execute arbitrary SQL commands. Impact per the source describes compromised data int...

CVE-2010-4720: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the JExtensions JE Auto comjeauto component before 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via unspecified vectors related to the view item page...

PT-2011-1670

Name of the Vulnerable Software and Affected Versions JExtensions JE Auto com jeauto version 1.1 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. This is related to the view item page, although the specific vectors are not specified. Recommendations For...

Joomla! Component JExtensions Property Finder - sf_id SQL Injection

Joomla! Component JExtensions Property Finder - sfid SQL Injection source: https://www.securityfocus.com/bid/45333/info JExtensions Property Finder is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting...

CVE-2010-4517

SQL injection vulnerability in the JExtensions JE Auto comjeauto component 1.0 for Joomla!, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the char parameter in an item action to index.php...

CVE-2010-4517

SQL injection vulnerability in the JExtensions JE Auto comjeauto component 1.0 for Joomla!, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the char parameter in an item action to index.php...

CVE-2010-4517: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the JExtensions JE Auto comjeauto component 1.0 for Joomla!, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the char parameter in an item action to index.php...

PT-2010-5520

Name of the Vulnerable Software and Affected Versions JExtensions JE Auto com jeauto component version 1.0 for Joomla! Description The issue allows remote attackers to execute arbitrary SQL commands when magic quotes gpc is disabled. This is achieved by exploiting the char parameter in an item...

CVE-2010-2680

Directory traversal vulnerability in the JExtensions JE Section/Property Finder jesectionfinder component for Joomla! allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the view parameter to index.php...

Directory traversal

Directory traversal vulnerability in the JExtensions JE Section/Property Finder jesectionfinder component for Joomla! allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the view parameter to index.php...

CVE-2010-2680: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the JExtensions JE Section/Property Finder jesectionfinder component for Joomla! allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the view parameter to index.php...

Cross site scripting

Cross-site scripting XSS vulnerability in the JExtensions JE Awd Song comawdsong component for Joomla! allows remote attackers to inject arbitrary web script or HTML via the song review field, which is not properly handled in a view action to index.php...