CVE-2017-11495

CVE-2017-11495 affects PHICOMM K2 (PSG1218) devices with firmware versions 22.5.11.5 and earlier. Multiple connected sources confirm an unauthenticated remote code execution vulnerability accessible via an unspecified ASP script, with a secondary exploit path where unauthenticated access to that ...

CVE-2017-11495

PHICOMM K2PSG1218 devices V22.5.11.5 and earlier allow unauthenticated remote code execution via a request to an unspecified ASP script; alternatively, the attacker can leverage unauthenticated access to this script to trigger a reboot via an ifType=reboot action...

Ajax search for K2, 2.2

Ajax search for K2 by taleia.software, 2.2, SQL Injection...

Joomla K2 2.1 SQL Injection

@@@ @@@@@@@@@@@ @@@@@ @@@@@@@@@@ @@@ @@@@@@@ @@@ @@@@@@@@@@@ @@@ @@ @@@ @@ @@@ @@@@@@@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@@@@@@@@@ @@@ @ @@@@@@@@@@ @@@ @@@@@@ @@@ @@@@@@@@@@@ @@@ @@ @@@ @@ @@@ @@@@@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@ @@@ @@@ @@ @@@...

Joomla AJAX Search For K2 2.2 SQL Injection

Exploit Title: Joomla! Component AJAX Search for K2 v2.2 - SQL Injection Google Dork: inurl:index.php?option=comk2ajaxsearch Date: 24.02.2017 Vendor Homepage: http://taleia.software/ Software Buy:...

Joomla! Component AJAX Search for K2 2.2 - SQL Injection

Joomla! Component AJAX Search for K2 2.2 - SQL Injection Exploit Title: Joomla! Component AJAX Search for K2 v2.2 - SQL Injection Google Dork: inurl:index.php?option=comk2ajaxsearch Date: 24.02.2017 Vendor Homepage: http://taleia.software/ Software Buy:...

Joomla AJAX Search for K2 2.2 Component - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component AJAX Search for K2 v2.2 - SQL Injection Google Dork: inurl:index.php?option=comk2ajaxsearch Date: 24.02.2017 Vendor Homepage: http://taleia.software/ Software Buy:...

Joomla Store for K2 3.8.2 Component - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component Store for K2 v3.8.2 - SQL Injection Google Dork: inurl:index.php?option=comk2store Date: 23.02.2017 Vendor Homepage: http://jworkplace.com/ Software Buy:...

Joomla! Stor for K2 Component SQL Injection Vulnerability

Joomla! is an open source content management system CMS, the system provides RSS feeds, site search and other functions. A SQL injection vulnerability exists in version 3.8.2 of the Joomla! Stor for K2 component. The vulnerability exists because the program fails to adequately filter user-submitt...

Joomla! Component AJAX Search for K2 2.2 - SQL Injection

Exploit Title: Joomla! Component AJAX Search for K2 v2.2 - SQL Injection Google Dork: inurl:index.php?option=comk2ajaxsearch Date: 24.02.2017 Vendor Homepage: http://taleia.software/ Software Buy:...

Joomla Store For K2 3.8.2 SQL Injection

Exploit Title: Joomla! Component Store for K2 v3.8.2 - SQL Injection Google Dork: inurl:index.php?option=comk2store Date: 23.02.2017 Vendor Homepage: http://jworkplace.com/ Software Buy: https://extensions.joomla.org/extensions/extension/extension-specific/k2-extensions/store-for-k2/ Demo:...

Joomla! Component Store for K2 3.8.2 - SQL Injection

Joomla! Component Store for K2 3.8.2 - SQL Injection Exploit Title: Joomla! Component Store for K2 v3.8.2 - SQL Injection Google Dork: inurl:index.php?option=comk2store Date: 23.02.2017 Vendor Homepage: http://jworkplace.com/ Software Buy:...

Joomla! Component Store for K2 3.8.2 - SQL Injection

Exploit Title: Joomla! Component Store for K2 v3.8.2 - SQL Injection Google Dork: inurl:index.php?option=comk2store Date: 23.02.2017 Vendor Homepage: http://jworkplace.com/ Software Buy: https://extensions.joomla.org/extensions/extension/extension-specific/k2-extensions/store-for-k2/ Demo:...

Joomla JE K2 Multiple Form Story 1.3 SQL Injection

Exploit Title: Joomla! Component JE K2 Multiple Form Story v1.3 - SQL Injection Google Dork: inurl:index.php?option=comjek2storymultipleform Date: 13.02.2017 Vendor Homepage: http://www.joomlaextension.biz/ Software Buy:...

Joomla JE K2 Multiple Form Story 1.3 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component JE K2 Multiple Form Story v1.3 - SQL Injection Google Dork: inurl:index.php?option=comjek2storymultipleform Date: 13.02.2017 Vendor Homepage: http://www.joomlaextension.biz/ Software Buy:...

Joomla! Component JE K2 Multiple Form Story 1.3 - Itemid SQL Injection

Joomla! Component JE K2 Multiple Form Story 1.3 - Itemid SQL Injection Exploit Title: Joomla! Component JE K2 Multiple Form Story v1.3 - SQL Injection Google Dork: inurl:index.php?option=comjek2storymultipleform Date: 13.02.2017 Vendor Homepage: http://www.joomlaextension.biz/ Software Buy:...

Joomla! Component JE K2 Multiple Form Story 1.3 - 'Itemid' SQL Injection

Exploit Title: Joomla! Component JE K2 Multiple Form Story v1.3 - SQL Injection Google Dork: inurl:index.php?option=comjek2storymultipleform Date: 13.02.2017 Vendor Homepage: http://www.joomlaextension.biz/ Software Buy:...

Joomla K2 2.7.1 Shell Upload / Cross Site Request Forgery

K2 RCE via CSRF or WCI Information =========== Name: K2 Joomla! Extension 2.5.0 - 2.7.1 Software: K2 Platform: Joomla 3.6.2 Homepage: https://getk2.org/, http://extensions.joomla.org/extension/k2 Vulnerability: RCE, arbitrary file upload, missing CSRF protection Prerequisites: victim has to be...

SQL Injection Vulnerability in Joomla Ja-K2-Filter-And-Search Component

Joomla is a PHP-based open source content management system CMS. Can be used to build commercial Web sites , personal blogs , information management systems , Web services , etc. , but also for secondary development to expand the scope of use . Joomla Ja-K2-Filter-And-Search component has a SQL...

ja-k2- filter-and- search, SQL Injection

ja-k2- filter-and- search, version 1.2.2 and all previous SQL Injection Resolution: update to 1.2.5 Update notice: https://www.joomlart.com/updates/joomla-extensions/important-security-fix-release-ja-k2-filter-component?utmsource=newslettermedium=emailcampaign=k2filtercritical Note that developer...