CVE-2023-23757 Extension - bestaddon.com - SQLi in BA Gallery component for Joomla <= 1.2.0

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability allows SQL Injection...

CVE-2023-34476 Extension - mooj.org - SQLi in Proforms Basic component for Joomla <= 1.6.0

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability allows SQL Injection...

CVE-2023-34476 Extension - mooj.org - SQLi in Proforms Basic component for Joomla <= 1.6.0

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability allows SQL Injection...

CVE-2023-34477 Extension - braincert.com - SQLi in Virtual Classroom component for Joomla <= 1.6.0

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability allows SQL Injection...

CVE-2023-34477 Extension - braincert.com - SQLi in Virtual Classroom component for Joomla <= 1.6.0

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability allows SQL Injection...

Joomla! Proforms Basic SQL Injection Vulnerability

Joomla! is a set of forum components used in the Joomla! content management system. A security vulnerability exists in Joomla! Proforms Basic that stems from improper neutralization of special elements, which can lead to SQL injection...

BA Gallery SQL Injection Vulnerability in Joomla!

Joomla! is a set of forum components used in the Joomla! content management system. A security vulnerability exists in Joomla! BA Gallery that stems from improper neutralization of special elements, which can lead to SQL injection...

Joomla! Creative Gallery SQL Injection Vulnerability

Joomla! is a set of forum components used in the Joomla! content management system. A security vulnerability exists in Joomla! Creative Gallery that stems from improper neutralization of special elements, which can lead to SQL injection...

PT-2023-26265 · Joomla · Onevote

Name of the Vulnerable Software and Affected Versions: oneVote component for Joomla affected versions not specified Description: The issue is related to improper neutralization of input during web page generation, also known as cross-site scripting. It allows for XSS targeting non-script elements...

Online Virtual Classroom SQL Injection Vulnerability in Joomla!

Joomla! is a set of forum components used in the Joomla! content management system. A security vulnerability exists in Joomla! Online Virtual Classroom that stems from improper neutralization of special elements, which can lead to SQL injection...

PT-2023-26264 · Hikashop.Com +1 · Hikashop Component For Joomla +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue involves an Improper Neutralization of Special Elements used in an SQL Command, also known as 'SQL Injection'. This allows for SQL Injection, which can potentially be...

PT-2023-24901 · Mooj.Org +1 · Proforms Basic Component For Joomla +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to an SQL Injection vulnerability due to the improper neutralization of special elements used in an SQL command. This allows for SQ...

PT-2023-19181 · Bestaddon.Com +1 · Ba Gallery Component For Joomla +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to an Improper Neutralization of Special Elements used in an SQL Command, also known as 'SQL Injection'. This allows for SQL...

Admiror Gallery Cross-Site Scripting Vulnerability

Joomla! is a set of forum components used in the Joomla! content management system. A security vulnerability exists in Joomla! Admiror Gallery that originates from improper input neutralization during page generation...

PT-2023-24902 · Braincert.Com +1 · Virtual Classroom Component For Joomla +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to an Improper Neutralization of Special Elements used in an SQL Command, also known as 'SQL Injection'. This allows for SQL...

HikaShop Joomla Component SQL Injection Vulnerability

HikaShop Joomla Component is an e-commerce component from the Hikari team for use in the Joomla content management system. A security vulnerability exists in HikaShop Joomla Component versions 4.4.1 through 4.7.2, which stems from improper neutralization of a special element, resulting in SQL...

JLex GuestBook 1.6.4 - Reflected XSS Vulnerability

Exploit Title: JLex GuestBook 1.6.4 - Reflected XSS Exploit Author: CraCkEr Vendor: JLexArt Vendor Homepage: https://jlexart.com/ Software Link: https://extensions.joomla.org/extension/contacts-and-feedback/guest-book/jlex-guestbook/ Demo: https://jlexguestbook.jlexart.com/ Version: 1.6.4 Tested...

Joomla JLex Review 6.0.1 - Reflected XSS Vulnerability

Exploit Title: Joomla JLex Review 6.0.1 - Reflected XSS Exploit Author: CraCkEr Vendor: JLexArt Vendor Homepage: https://jlexart.com/ Software Link: https://extensions.joomla.org/extension/jlex-review/ Demo: https://jlexreview.jlexart.com/ Version: 6.0.1 Tested on: Windows 10 Pro Impact: Manipula...

Joomla JLex Review 6.0.1 - Reflected XSS

Exploit Title: Joomla JLex Review 6.0.1 - Reflected XSS Exploit Author: CraCkEr Date: 01/08/2023 Vendor: JLexArt Vendor Homepage: https://jlexart.com/ Software Link: https://extensions.joomla.org/extension/jlex-review/ Demo: https://jlexreview.jlexart.com/ Version: 6.0.1 Tested on: Windows 10 Pro...

Joomla JLex Review 6.0.1 Cross Site Scripting

Exploit Title: Joomla JLex Review 6.0.1 - Reflected XSS Exploit Author: CraCkEr Date: 01/08/2023 Vendor: JLexArt Vendor Homepage: https://jlexart.com/ Software Link: https://extensions.joomla.org/extension/jlex-review/ Demo: https://jlexreview.jlexart.com/ Tested on: Windows 10 Pro Impact:...