Joomla Component com_jsupport SQL Injection Vulnerability

No description provided by source. Exploit Title: Joomla Component comjsupport SQL Injection Vulnerability Date: 12.11.2010 Author: Valentin Category: webapps/0day Version: 1.5.6 Tested on: CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General...

CVE-2010-4838: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the JSupport comjsupport component 1.5.6 for Joomla! allows remote authenticated users, with Public Back-end permissions, to execute arbitrary SQL commands via the alpha parameter in a 1 listTickets or 2 listFaqs action to administrator/index.php...

PT-2011-1773

Name of the Vulnerable Software and Affected Versions Joomla! JSupport com jsupport component version 1.5.6 Description The issue allows remote authenticated users with Public Back-end permissions to execute arbitrary SQL commands. This is achieved by exploiting the alpha parameter in either a...