EUVD-2016-1066

Malware in sbrugna...

CVE-2016-1000122

XSS and SQLi in Huge IT Joomla Slider v1.0.9 extension...

CVE-2016-1000122

XSS and SQLi in Huge IT Joomla Slider v1.0.9 extension...

CVE-2016-1000121

XSS and SQLi in Huge IT Joomla Slider v1.0.9 extension...

Cross site scripting

XSS and SQLi in Huge IT Joomla Slider v1.0.9 extension...

CVE-2016-1000122

XSS and SQLi in Huge IT Joomla Slider v1.0.9 extension...

CVE-2016-1000121

XSS and SQLi in Huge IT Joomla Slider v1.0.9 extension...

CVE-2016-1000121

CVE-2016-1000121 affects the Huge IT Joomla Slider extension v1.0.9. The connected documents describe reflected XSS and SQL Injection vulnerabilities in the component, arising from inadequate input filtering in the extension’s admin code paths (notably in the slider manager and related PHP files)...

CVE-2016-1000122

The CVE-2016-1000122 entry describes XSS and SQL injection in the Huge IT Joomla Slider v1.0.9 extension. Connected sources corroborate affected functionality in the admin area: XSS via id parameter in ./admin/views/slider/tmpl/default.php and SQL injection in ./admin/models/slider.php. The root ...

CVE-2016-1000121: Improper Neutralization of Input During Web Page Generation

XSS and SQLi in Huge IT Joomla Slider v1.0.9 extension...

PT-2016-4514

Name of the Vulnerable Software and Affected Versions Huge IT Joomla Slider version 1.0.9 Description The issue involves XSS and SQLi in the Huge IT Joomla Slider extension. Recommendations For version 1.0.9, update to a newer version that contains a fix for this issue, if available. At the momen...

CVE-2016-1000122: Improper Neutralization of Special Elements used in an SQL Command

XSS and SQLi in Huge IT Joomla Slider v1.0.9 extension...

PT-2016-4513

Name of the Vulnerable Software and Affected Versions Huge IT Joomla Slider version 1.0.9 Description The issue involves XSS and SQLi in the Huge IT Joomla Slider extension. Recommendations For version 1.0.9, update to a newer version that contains a fix for this issue, if available. At the momen...

Huge IT Joomla Slider 1.0.9 XSS / SQL Injection

Title: Reflected XSS and SQLi in Huge IT Joomla Slider v1.0.9 extension Author: Larry W. Cashdollar, @larry0 Date: 2016-07-22 Download Site: http://extensions.joomla.org/extensions/extension/photos-a-images/slider Vendor: huge-it.com Vendor Notified: 2016-07-22 Vendor Contact: Description: Huge-I...