Joomla! Component Youtube Gallery 4.1.7 - SQL Injection

Exploit Title: Joomla component comyoutubegallery - SQL Injection vulnerability Google Dork: inurl:index.php?option=comyoutubegallery Date: 15-07-2014 Exploit Author: Pham Van Khanh [email protected] Vendor Homepage: http://www.joomlaboat.com/youtube-gallery Software Link:...

Joomla Component wmi (com_wmi) LFI Vulnerability

No description provided by source. ================================================================================================ Title : Joomla Component wmi comwmi LFI Vulnerability Vendor : http://www.paysyspro.com/ Download : http://www.paysyspro.com/jotloader/files.download/3 Date : Sunday...

Joomla Component (com_jphone) Local File Inclusion Vulnerability

0x01 漏洞简述 CVE-2010-3426 CNNVD-201009-171 发布时间 : 2010-09-16 影响版本 : 1.0 Alpha 3 官方主页 : http://www.4you-studio.com 下载链接 : http://www.joomlafrance.org/telecharger/download/Jphone/344bbad81cf491b6e5215e3f15fc3fb7.html 4You-Studio JPhone组件 'controller' 参数本地文件包含漏洞 Joomla!是一款开放源码的内容管理系统CMS。 Joomla!中的JPho...

Joomla! Component TTVideo 1.0 - SQL Injection

Joomla! Component TTVideo 1.0 - SQL Injection TTVideo 1.0 Joomla Component SQL Injection Vulnerability Download link: http://www.toughtomato.com/resources/downloads/joomla-1.5/components/ttvideo/ Name TTVideo Vendor http://www.toughtomato.com Versions Affected 1.0 Author Salvatore Fresta aka...

Joomla! Component Graphics 1.0.6 - Local File Inclusion

================================================================================================ Title : Joomla Component graphics comgraphics v1.0.6 LFI Vulnerability Vendor : http://htmlcoderhelper.com/ Download :...

CVE-2008-4105

JRequest in Joomla! 1.5 before 1.5.7 does not sanitize variables that were set with JRequest::setVar, which allows remote attackers to conduct "variable injection" attacks and have unspecified other impact...

[20080901] - Core - JRequest Variable Injection

A flaw in JRequest exists where variables set with JRequest::setVar are not cleaned when fetching the variable at a later point in the request. This can result in variable injection unwanted characters injected into returned data...