49 matches found
CVE-2020-25751
The paGO Commerce plugin 2.5.9.0 for Joomla! allows SQL Injection via the administrator/index.php?option=compago&view=comments filterpublished parameter...
CVE-2020-25751
The paGO Commerce plugin 2.5.9.0 for Joomla! allows SQL Injection via the administrator/index.php?option=compago&view=comments filterpublished parameter...
Sql injection
The paGO Commerce plugin 2.5.9.0 for Joomla! allows SQL Injection via the administrator/index.php?option=compago&view=comments filterpublished parameter...
CVE-2020-25751
CVE-2020-25751 affects the paGO Commerce plugin 2.5.9.0 for Joomla!, enabling SQL Injection via the URL parameter administrator/index.php?option=com_pago&view=comments filter_published. NVD lists CVSS v3.1 base score 8.8 (HIGH) with NETWORK attack, LOW privileges, and no user interaction; impacts...
CVE-2020-25751
The paGO Commerce plugin 2.5.9.0 for Joomla! allows SQL Injection via the administrator/index.php?option=compago&view=comments filterpublished parameter...
Joomla! paGO Commerce SQL Injection Vulnerability
Joomla! is an open source, cross-platform content management system CMS developed using PHP and MySQL. A SQL injection vulnerability exists in Joomla! paGO Commerce. An attacker can exploit the vulnerability to obtain sensitive database information...
Joomla! paGO Commerce 2.5.9.0 SQL Injection
Exploit Title: Joomla! paGO Commerce 2.5.9.0 - SQL Injection Authenticated Date: 2020-08-21 Exploit Author: Mehmet Kelepçe / Gais Cyber Security Author ID: 8763 Vendor Homepage: https://www.corephp.com/ Software Link: https://www.corephp.com/joomla-products/pago-commerce Version: 2.5.9.0 Tested o...
Joomla! paGO Commerce 2.5.9.0 - SQL Injection (Authenticated)
Exploit Title: Joomla! paGO Commerce 2.5.9.0 - SQL Injection Authenticated Date: 2020-08-21 Exploit Author: Mehmet Kelepçe / Gais Cyber Security Author ID: 8763 Vendor Homepage: https://www.corephp.com/ Software Link: https://www.corephp.com/joomla-products/pago-commerce Version: 2.5.9.0 Tested o...
