CVE-2017-17870

The JBuildozer extension 1.4.1 for Joomla! has SQL Injection via the appid parameter in an entriessearch action...

CVE-2017-15966

The Zh YandexMap aka comzhyandexmap component 6.1.1.0 for Joomla! allows SQL Injection via the placemarklistid parameter to index.php...

Joomla! 3.7 Core SQL injection (CVE-2017-8917)vulnerability analysis-vulnerability warning-the black bar safety net

Author: p0wd3r know Chong Yu 404 security lab Date: 2017-05-18 0x00 vulnerability overview Vulnerability description Joomla to 5 on 17 May released the new version 3. 7. 1, of this update fixes a high-riskSQL injectionvulnerability to successfully exploit the vulnerability an attacker can...

CVE-2017-7628

The "Smart related articles" extension 1.1 for Joomla! has SQL injection in dialog.php attacker must use searchcats variable in POST method to exploit this vulnerability...

Joomla onisPetitions 2.5 Component - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla Component onisPetitions 2.5 - SQL Injection Date: 2017-02-11 Home : https://extensions.joomla.org/extensions/extension/contacts-and-feedback/polls/onispetitions/ Exploit Author: Persian Hack Team Discovered by : Mojtaba...

Joomla! Component com_formmaker 3.4 - SQL Injection

Exploit Title : Joomla Spider Form Maker = 3.4 SQL Injection Exploit Author : Claudio Viviani Vendor Homepage : http://web-dorado.com/ Software Link : http://web-dorado.com/products/joomla-form.html Dork Google: inurl:comformmaker Date : 2014-09-07 Tested on : Windows 7 / Mozilla Firefox Linux /...

Joomla! Component Spider Contacts 1.3.6 - 'contacts_id' SQL Injection

!/usr/bin/env python Exploit Title : Joomla Spider Contacts = 1.3.6 SQL Injection Exploit Author : Claudio Viviani Vendor Homepage : http://web-dorado.com/ Software Link : http://web-dorado.com/?option=comwdsubscriptions&view=dwnldfree&format=row&id=60 fixed Mirror Link :...

Joomla! Spider Video Player Component <= 2.8.3 SQLi Vulnerability - Active Check

Joomla! Spider video player Component is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Joomla com_surveymanager 1.5.0 - SQL Injection Vulnerability (stype)

No description provided by source...

Joomla Component com_spidercatalog SQL injection Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Joomla "com_club" component SQL Injection

Exploit for php platform in category web applications Exploit Title: Joomla "comclub" component SQL Injection Date: 16.01.2012 Author: Ereee Version: all Category:: remote, webapps Google dork: inurl:"?option=comclub" Tested in: web...

Joomla com_morfeoshow SQL Injection Vulnerability

Exploit for php platform in category web applications tupacal Exploit Title: Joomla commorfeoshow SQL Injection Vulnerability Date: 06/08/2011 Author: TuPac^ShaKuR Download Link:...

Teams 1_1028_100809_1711 Joomla Component Multiple Blind SQL Injection Vulnerabilities

Teams 110281008091711 Joomla Component Multiple Blind SQL Injection Vulnerabilities Name Teams Vendor http://www.joomlamo.com Versions Affected 110281008091711 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2010-08-10 X...

Joomla! Component redSHOP 1.0.23.1 - Blind SQL Injection

Joomla! Component redSHOP 1.0.23.1 - Blind SQL Injection RedShop 1.0.23.1 Joomla Component Blind SQL Injection Vulnerability Name RedShop Vendor http://redweb.dk Versions Affected 1.0.23.1 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gma...

Joomla! Component Search Log 3.1.0 - SQL Injection

Exploit Title: Joomla Component comsearchlog SQL Injection Date: 05/06/2010 Author: d0lc3 d0lc3xatgmaildomcom Software Link: http://www.kanich.net/radio/site/searchlog/searchlog-download Version: 3.1.0 Tested on: Linux ubuntu32 2.6.32-22-generic x64 Summary: Good nights, at this occassion we have...

Joomla Component com_konsultasi (sid) SQL Injection Vulnerability

No description provided by source. ------------------------------------------------------------------------- Joomla Component comkonsultasi sid SQL Injection Vulnerability ------------------------------------------------------------------------- Author : c4uR Date : May, 13, 2010 Location :...

Joomla BF Survey Basic SQL Injection

Joomla Component combfsurveybasic SQL Injection Vulnerability + Author: FL0RiX + Greez : Wretch-x And All Friends + HomePage : http://oltan.org + Download : http://www.tamlyncreative.com.au/software/index.php/downloads.html?func=download&fileid=24 + Exploit; +...

Joomla! Component com_kkcontent - Blind SQL Injection

Joomla! Component comkkcontent - Blind SQL Injection Joomla Component comkkcontent Blind SQL Injection Vulnerability Author : Pyske Home : www.cyber-warrior.org Greetz : Fl0riX , M-K-A and All Cyber-Warrior Name : comkkcontent Bug Type : Blind SQL Injection Infection : Admin login bilgileri...

Joomla! Component ElearningForce Flash Magazine Deluxe - SQL Injection

Joomla! Component ElearningForce Flash Magazine Deluxe - SQL Injection www.turkguvenligi.info / Author : TurkGuvenligi / Mail : [email protected] t4cs1zkr4L - Agdscorp - TheHacker - Fatih - SuSkuN - Zec - DreamTurk - Mr.SheYtaN - Ghost61 - BLaSteR - Desquner Very Very Thanks : TurkguvenLig...

Joomla com_xevidmegahd SQL Injection

!/usr/bin/perl -w Joomla comxevidmegahd Sql injection Author : EcHoLL www.warezturk.org www.tahribat.com Greetz : Blacklabel TURK Godlike Nitrous ! ModuleName: comxevidmegahd ! ScriptName: Joomla ! GoogleDork: inurl:"comxevidmegahd" system"color FF0000"; system"Nohacking"; print...