EUVD-2010-4803

Malware in sbrugna...

EUVD-2010-4802

Malware in sbrugna...

CVE-2010-4837

Cross-site scripting XSS vulnerability in the JSupport comjsupport component 1.5.6 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the subject parameter title field in a saveTicket action to index2.php. NOTE: some of these details are obtained from third party...

Sql injection

SQL injection vulnerability in the JSupport comjsupport component 1.5.6 for Joomla! allows remote authenticated users, with Public Back-end permissions, to execute arbitrary SQL commands via the alpha parameter in a 1 listTickets or 2 listFaqs action to administrator/index.php...

Cross site scripting

Cross-site scripting XSS vulnerability in the JSupport comjsupport component 1.5.6 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the subject parameter title field in a saveTicket action to index2.php. NOTE: some of these details are obtained from third party...

CVE-2010-4838

CVE-2010-4838 concerns a SQL injection in the Joomla! JSupport (com_jsupport) component version 1.5.6. The vulnerability is triggered via the alpha parameter in administrator/index.php for actions (1) listTickets or (2) listFaqs, allowing remote, authenticated users with Public Back-end permissio...

CVE-2010-4837

Cross-site scripting XSS vulnerability in the JSupport comjsupport component 1.5.6 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the subject parameter title field in a saveTicket action to index2.php. NOTE: some of these details are obtained from third party...

CVE-2010-4837

CVE-2010-4837 affects Joomla! with the JSupport (com_jsupport) component version 1.5.6. It is a Cross-site Scripting (XSS) vulnerability exploitable via the subject parameter (title field) in a saveTicket action to index2.php, allowing remote script/HTML injection. The NVD lists a base score of 4...

CVE-2010-4838

SQL injection vulnerability in the JSupport comjsupport component 1.5.6 for Joomla! allows remote authenticated users, with Public Back-end permissions, to execute arbitrary SQL commands via the alpha parameter in a 1 listTickets or 2 listFaqs action to administrator/index.php...

Joomla JSupport 1.5.6 Cross Site Scripting

Exploit Title: Joomla Component comjsupport Critical XSS Vulnerability Date: 12.11.2010 Author: Valentin Category: webapps/0day Version: 1.5.6 Tested on: CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information Advisory/Exploit Title =...

Joomla! Component JSupport 1.5.6 - Cross-Site Scripting

Exploit Title: Joomla Component comjsupport Critical XSS Vulnerability Date: 12.11.2010 Author: Valentin Category: webapps/0day Version: 1.5.6 Tested on: CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information Advisory/Exploit Title =...

Joomla JSupport 1.5.6 SQL Injection

Exploit Title: Joomla Component comjsupport SQL Injection Vulnerability Date: 12.11.2010 Author: Valentin Category: webapps/0day Version: 1.5.6 Tested on: CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information Advisory/Exploit Title =...

Joomla! Component JSupport 1.5.6 - SQL Injection

Joomla! Component JSupport 1.5.6 - SQL Injection Exploit Title: Joomla Component comjsupport SQL Injection Vulnerability Date: 12.11.2010 Author: Valentin Category: webapps/0day Version: 1.5.6 Tested on: CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::...

Joomla! Component JSupport 1.5.6 - Cross-Site Scripting

Joomla! Component JSupport 1.5.6 - Cross-Site Scripting Exploit Title: Joomla Component comjsupport Critical XSS Vulnerability Date: 12.11.2010 Author: Valentin Category: webapps/0day Version: 1.5.6 Tested on: CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1...