Joomla! Component Jimtawl 1.0.2 - Local File Inclusion

A directory traversal vulnerability in the Jimtawl comjimtawl component 1.0.2 Joomla! allows remote attackers to read arbitrary files and possibly unspecified other impacts via a .. dot dot in the task parameter to index.php. id: CVE-2010-4769 info: name: Joomla! Component Jimtawl 1.0.2 - Local...

EUVD-2010-4734

Malware in sbrugna...

EUVD-2018-9153

Malware in sbrugna...

CVE-2018-17399

SQL Injection exists in the Jimtawl 2.2.7 component for Joomla! via the id parameter...

Jimtawl SQL Injection Vulnerability in Joomla!

Joomla! is a U.S. Open Source Matters team using PHP and MySQL development of a set of open source, cross-platform content management system CMS. Jimtawl is used in one of the ability to display the radio program listings on the web page of the component . A SQL injection vulnerability exists in...

CVE-2018-17399

SQL Injection exists in the Jimtawl 2.2.7 component for Joomla! via the id parameter...

CVE-2018-17399

SQL Injection exists in the Jimtawl 2.2.7 component for Joomla! via the id parameter...

Sql injection

SQL Injection exists in the Jimtawl 2.2.7 component for Joomla! via the id parameter...

CVE-2018-17399

SQL Injection exists in the Jimtawl 2.2.7 component for Joomla! via the id parameter...

CVE-2018-17399

CVE-2018-17399 affects the Jimtawl 2.2.7 component for Joomla! via the id parameter, enabling SQL injection. The issue is documented across multiple feeds (e.g., Red Hat, CNVD, NVD, CVE List) as a SQL injection vulnerability with high to critical impact; exploitation details are referenced in Exp...

Jimtawl 2.2.7 - 'id' SQL Injection

Jimtawl 2.2.7 - 'id' SQL Injection Developer statement update to 2.2.8 http://janguo.de/lang-de/joomla-25-higher/joomla-25-jimtawl-2-1.html...

Joomla! Jimtawl 2.2.7 SQL Injection

Exploit Title: Joomla! Component Jimtawl 2.2.7 - 'id' SQL Injection Exploit Author: Ihsan Sencan Dork: N/A Date: 2018-10-03 Vendor Homepage: https://janguo.de/ Software Link: https://extensions.joomla.org/extensions/extension/vertical-markets/thematic-directory/collection-factory/ Software...

Joomla! Component Jimtawl 2.2.7 - 'id' SQL Injection

Exploit Title: Joomla! Component Jimtawl 2.2.7 - 'id' SQL Injection Exploit Author: Ihsan Sencan Dork: N/A Date: 2018-10-03 Vendor Homepage: https://janguo.de/ Software Link: https://extensions.joomla.org/extensions/extension/vertical-markets/thematic-directory/collection-factory/ Software...

Joomla Jimtawl 2.2.7 Component - id SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component Jimtawl 2.2.7 - 'id' SQL Injection Exploit Author: Ihsan Sencan Vendor Homepage: https://janguo.de/ Software Link:...

Joomla! Component Jimtawl 2.2.7 - id SQL Injection

Joomla! Component Jimtawl 2.2.7 - id SQL Injection Exploit Title: Joomla! Component Jimtawl 2.2.7 - 'id' SQL Injection Exploit Author: Ihsan Sencan Dork: N/A Date: 2018-10-03 Vendor Homepage: https://janguo.de/ Software Link:...

Jimtawl, 2.2.6, Arbitrary File Upload

Jimtawl from janguo.de, 2.2.6, arbitrary file upload Resolution: update to 2.2.7 Update notice: http://janguo.de/lang-de/joomla-25-higher/jimtawl.html...

Jimtawl Arbitrary File Upload Vulnerability

Joomla! is a U.S. Open Source Matters team developed a set of open source content management system CMS, Jimtawl is one of the components used to display information about the program being played . A security vulnerability exists in Joomla! Jimtawl versions 2.1.6 and 2.2.5. An attacker can explo...

CVE-2018-6580

Arbitrary file upload exists in the Jimtawl 2.1.6 and 2.2.5 component for Joomla! via a view=upload&task=upload&pop=true&tmpl=component request...

CVE-2018-6580

Arbitrary file upload exists in the Jimtawl 2.1.6 and 2.2.5 component for Joomla! via a view=upload&task=upload&pop=true&tmpl=component request...

CVE-2018-6580

CVE-2018-6580 affects Joomla! Jimtawl component versions 2.1.6 and 2.2.5, allowing arbitrary file upload through view=upload&task=upload&pop=true&tmpl=component. The issue enables an attacker to upload arbitrary files (e.g., web shells) via the upload endpoint, as documented by NVD/CNVD entries a...