CVE-2026-9767

The The School Management – Education & Learning ERP plugin for WordPress is vulnerable to generic SQL Injection via 'order0dir' Parameter in all versions up to, and including, 5.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL...

PT-2020-7095

Name of the Vulnerable Software and Affected Versions Joomla! version 1.6.0 Description The issue is related to SQL Injection via the filter order and filer order Dir parameters. This allows for potential exploitation. Recommendations For Joomla! version 1.6.0, consider restricting access to the...

CVE-2019-13076

Quest KACE Systems Management Appliance Server Center 9.1.317 is vulnerable to SQL injection. An authenticated user has the ability to execute arbitrary commands against the database. The affected component is /userui/ticketlist.php, and affected parameters are order0column and order0dir...

CVE-2019-13076

Quest KACE Systems Management Appliance Server Center 9.1.317 is vulnerable to SQL injection. An authenticated user has the ability to execute arbitrary commands against the database. The affected component is /userui/ticketlist.php, and affected parameters are order0column and order0dir...

CVE-2018-17381

SQL Injection exists in the Dutch Auction Factory 2.0.2 component for Joomla! via the filterorderDir or filterorder parameter...

PT-2019-9457

Name of the Vulnerable Software and Affected Versions Dutch Auction Factory version 2.0.2 Description A SQL Injection issue exists in the Dutch Auction Factory component for Joomla!, which can be exploited via the filter order Dir or filter order parameter. Recommendations For version 2.0.2,...

PT-2019-9456

Name of the Vulnerable Software and Affected Versions Auction Factory version 4.5.5 Description The issue exists due to SQL Injection in the Auction Factory component for Joomla. This is achieved via the filter order Dir or filter order parameter. Recommendations For Auction Factory version 4.5.5...

CVE-2018-17378

SQL Injection exists in the Penny Auction Factory 2.0.4 component for Joomla! via the filterorderDir or filterorder parameter...

CVE-2018-17384

SQL Injection exists in the Swap Factory 2.2.1 component for Joomla! via the filterorderDir or filterorder parameter...

CVE-2018-17379

SQL Injection exists in the Raffle Factory 3.5.2 component for Joomla! via the filterorderDir or filterorder parameter...

CVE-2018-17376

SQL Injection exists in the Reverse Auction Factory 4.3.8 component for Joomla! via the filterorderDir, cat, or filterletter parameter...

PT-2018-14002

Name of the Vulnerable Software and Affected Versions Raffle Factory version 3.5.2 Description A SQL Injection issue exists in the Raffle Factory component for Joomla, specifically via the filter order Dir or filter order parameters. Recommendations For version 3.5.2, consider restricting access ...

PT-2018-14001

Name of the Vulnerable Software and Affected Versions Penny Auction Factory version 2.0.4 Description A SQL Injection issue exists in the Penny Auction Factory component for Joomla. The issue is related to the filter order Dir or filter order parameters. Recommendations For Penny Auction Factory...

PT-2018-14007

Name of the Vulnerable Software and Affected Versions Joomla! Swap Factory version 2.2.1 Description A SQL Injection issue exists in the Swap Factory component for Joomla!, which can be exploited via the filter order Dir or filter order parameter. Recommendations For version 2.2.1, consider...

PT-2018-14006

Name of the Vulnerable Software and Affected Versions Joomla! Collection Factory version 4.1.9 Description A SQL Injection issue exists in the Collection Factory component for Joomla!, which can be exploited via the filter order or filter order Dir parameter. Recommendations For version 4.1.9,...

PT-2018-13999

Name of the Vulnerable Software and Affected Versions Joomla! Reverse Auction Factory version 4.3.8 Description A SQL Injection issue exists in the Reverse Auction Factory component for Joomla!. This issue can be exploited via the filter order Dir, cat, or filter letter parameters. Recommendation...

Component Responsive Portfolio 'filter_order_Dir' SQL Injection Vulnerability in Joomla!

Joomla! is the United States Open Source Matters team developed a set of open source content management system CMS. A SQL injection vulnerability exists in the Responsive Portfolio 'filterorderDir' component of Joomla! An attacker can execute SQL commands by including vulnerable parameters...

Component Dutch Auction Factory 'filter_order_Dir' SQL Injection Vulnerability in Joomla!

Joomla! is the United States Open Source Matters team developed a set of open source content management system CMS. A SQL injection vulnerability exists in the Dutch Auction Factory 'filterorderDir' component of Joomla! An attacker can insert SQL commands into the query string of a web form...

Joomla! Multiple SQL Injection Vulnerabilities

The host is running Joomla! and is prone to multiple SQL injection vulnerabilities. OpenVAS Vulnerability Test $Id: gbjoomlamultsqlinjvuln.nasl 7015 2017-08-28 11:51:24Z teissa $ Joomla! Multiple SQL Injection Vulnerabilities Authors: Sooraj KS Copyright: Copyright c 2011 Greenbone Networks GmbH,...

PT-2011-1467

Name of the Vulnerable Software and Affected Versions Joomla! versions 1.5.x through 1.5.21 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the filter order parameter in a com weblinks category action to "index.php", the filter order Dir...