EUVD-2016-1066

Malware in sbrugna...

CVE-2016-1000122

XSS and SQLi in Huge IT Joomla Slider v1.0.9 extension...

CVE-2016-1000122

XSS and SQLi in Huge IT Joomla Slider v1.0.9 extension...

CVE-2016-1000121

XSS and SQLi in Huge IT Joomla Slider v1.0.9 extension...

Cross site scripting

XSS and SQLi in Huge IT Joomla Slider v1.0.9 extension...

CVE-2016-1000121

XSS and SQLi in Huge IT Joomla Slider v1.0.9 extension...

CVE-2016-1000122

XSS and SQLi in Huge IT Joomla Slider v1.0.9 extension...

CVE-2016-1000121

CVE-2016-1000121 affects the Huge IT Joomla Slider extension v1.0.9. The connected documents describe reflected XSS and SQL Injection vulnerabilities in the component, arising from inadequate input filtering in the extension’s admin code paths (notably in the slider manager and related PHP files)...

CVE-2016-1000122

The CVE-2016-1000122 entry describes XSS and SQL injection in the Huge IT Joomla Slider v1.0.9 extension. Connected sources corroborate affected functionality in the admin area: XSS via id parameter in ./admin/views/slider/tmpl/default.php and SQL injection in ./admin/models/slider.php. The root ...

Huge IT Joomla Slider 1.0.9 XSS / SQL Injection

Title: Reflected XSS and SQLi in Huge IT Joomla Slider v1.0.9 extension Author: Larry W. Cashdollar, @larry0 Date: 2016-07-22 Download Site: http://extensions.joomla.org/extensions/extension/photos-a-images/slider Vendor: huge-it.com Vendor Notified: 2016-07-22 Vendor Contact: Description: Huge-I...