Joomla com_x-shop 'idd' Parameter SQL Injection Vulnerability

This host is running Joomla x-shop component and is prone to SQL injection vulnerability. OpenVAS Vulnerability Test $Id: gbjoomlacomxshopsqlinjvuln.nasl 5888 2017-04-07 09:01:53Z teissa $ Joomla comx-shop 'idd' Parameter SQL Injection Vulnerability Authors: Madhuri D Copyright: Copyright c 2012...

Joomla X-shop远程文件包含漏洞

Joomla X-shop是一款基于PHP的电子购物程序。 Joomla X-shop不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是脚本对用户提交的WEB参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 Joomla X-Shop 1.7 http://mamboxchange.com/projects/x-shop/...

xshop.txt

!!!!!!!!!WWW.SiBERSAVASCiLAR.COM!!!!!!!!! -------------------------------------------------------------------------------- Title : Joomla x-shop = 1.7 Remote File Include Vulnerability -------------------------------------------------------------------------------- Author: CrackersChild cont@ct:...

Joomla x-shop <= 1.7 Remote File Include Vulnerability

!!!!!!!!!WWW.SiBERSAVASCiLAR.COM!!!!!!!!! -------------------------------------------------------------------------------- Title : Joomla x-shop = 1.7 Remote File Include Vulnerability -------------------------------------------------------------------------------- Author: CrackersChild cont@ct:...