CVE-2019-9184

CVE-2019-9184 affects the Joomla! J2Store plugin (versions prior to 3.3.7). The vulnerability is a SQL injection in the product_option[] parameter, allowing remote attackers to execute arbitrary SQL commands. Exploitation details in public reports reference the vulnerable parameter (product_optio...

Component vReview SQL Injection Vulnerability in Joomla!

Joomla! is an open source content management system CMS. A SQL injection vulnerability exists in the Joomla! component vReview. An attacker can exploit the vulnerability to obtain sensitive database information...

Component vBizz Remote Code Execution Vulnerability in Joomla!

Joomla! is an open source content management system CMS. A remote code execution vulnerability exists in the vBizz component of Joomla! Allows an attacker to remotely execute commands to gain server privileges...

Joomla RD e-Tickets TicketMasterExt 3.5.7 SQL Injection

Exploit Title : Joomla RD e-Tickets TicketMasterExt Components 3.5.7 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 25/02/2019 Vendor Homepage : rd-media.org Software Download Link : rd-media.org/downloads/category/rd-etickets.html Software...

Joomla Contact Enhanced 3.9.2 SQL Injection

Exploit Title : Joomla Contact Enhanced Components 3.9.2 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 25/02/2019 Vendor Homepage : idealextensions.com Software Information Link : extensions.joomla.org/extension/contact-enhanced-component/...

Joomla Responsive Grid For Articles Grid 3.4.5 SQL Injection

Exploit Title : Joomla Responsive Grid for Articles ComGrid Components 3.4.5 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 25/02/2019 Vendor Homepage : toolsjx.web-help.me minitek.gr Software Information Link :...

Joomla SpiderCalendar 3.2.17 SQL Injection

Exploit Title : Joomla SpiderCalendar Components 3.2.17 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 25/02/2019 Vendor Homepage : web-dorado.com Software Download Link : web-dorado.com/products/joomla-calendar.html Software Information Link :...

Joomla BookingCalendarForJoomla 3.4.0 SQL Injection

Exploit Title : Joomla BookingCalendarForJoomla 3.4.0 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 25/02/2019 Vendor Homepage : joomlabookingcalendar.com availabilitycalendar.com Software Information Link :...

Joomla Geommunity3es 1.4 SQL Injection

Exploit Title : Joomla Geommunity3es Components 1.4 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 25/02/2019 Vendor Homepage : nordmograph.com Software Download Link : nordmograph.com/extensions /index.php?option=comvirtuemart&view=productdetails...

Joomla Furniture Virtuemart Templates 1.5 SQL Injection

Exploit Title : Joomla Furniture Virtuemart Templates 1.5 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 25/02/2019 Vendor Homepage : ordasoft.com Software Download Link : ordasoft.com/download-furniture-joomla-virtuemart-template Software...

Joomla FlexiContent 3.2.1.15 SQL Injection

Exploit Title : Joomla FlexiContent Components 3.2.1.15 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 25/02/2019 Vendor Homepage : flexicontent.org Software Download Link : github.com/FLEXIcontent/flexicontent-cck/archive/v3.2.1.15.zip Software...

Joomla JM Car Classifieds CarAgent Templates 3.8.12 SQL Injection

Exploit Title : Joomla JM Car Classifieds CarAgent Templates 3.8.12 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 25/02/2019 Vendor Homepage : joomla-monster.com Software Information Link :...

Joomla Matukio Events 7.0.15 SQL Injection

Exploit Title : Joomla Matukio Events Components 7.0.15 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 25/02/2019 Vendor Homepage : compojoom.com Software Download Link : matukio.compojoom.com Software Information Link :...

Joomla ChronoForms 6.0.17 SQL Injection

Exploit Title : Joomla ChronoForms Components 6.0.17 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 26/02/2019 Vendor Homepage : chronoengine.com Software Download Link : chronoengine.com/chronoforms Software Information Link :...

Joomla! prior to 3.9.3 Cross-Site Scripting (XSS) Vulnerability

According to its self-reported version number, the Joomla! installation running on the remote web server is prior to 3.9.3. In versions prior to 3.9.3, a cross-site scripting XSS vulnerability exists due to improper validation of user-supplied input before returning it to users. An unauthenticate...

Edocman,1.1.17,SQL Injection

Edocman,1.1.17,SQL Injection Extension Update Details Fix security issue on Joomla SQL injection from previous Edocman version. new version number 1.11.8 UpdateNotice URL...

Joomla AdsManager 3.2.0 CSRF / Database Disclosure / SQL Injection

Exploit Title : Joomla AdsManager Components 3.2.0 CSRF / RFI / Backdoor Access / SQL Injection / Database Disclosure Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 20/02/2019 Vendor Homepage : joomprod.com juloa.com Software Download Link :...

Joomla! 2.5.0 < 3.9.3 Multiple Vulnerabilities

According to its self-reported version number, the Joomla! installation running on the remote web server is prior to 3.9.3. It is, therefore, affected by multiple vulnerabilities: - An object injection vulnerability exists in Joomla! prior to 3.9.3 due to the absence of a protection mechanism to...

Joomla Attachments 3.2.6 Shell Upload

Exploit Title : Joomla Attachments Components 3.2.6 Shell Upload Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 18/02/2019 Vendor Homepage : jmcameron.net Software Download Links : jmcameron.net/attachments/...

Joomla JWallPapers 2.0.1 Cross Site Request Forgery / Shell Upload

Exploit Title : Joomla JWallPapers Components 2.0.1 CSRF Shell Upload Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 18/02/2019 Vendor Homepage : joomla4ever.org Software Download Link : joomla4ever.org/archive/ext/comjwallpapers.zip Software Information Link :...