EUVD-2015-7266

Malware in sbrugna...

CVE-2015-7342: Improper Neutralization of Special Elements used in an SQL Command

JNews Joomla Component before 8.5.0 allows SQL injection via upload thumbnail, Queue Search Field, Subscribers Search Field, or Newsletters Search Field...

PT-2020-7886

Name of the Vulnerable Software and Affected Versions: JNews Joomla Component versions prior to 8.5.0 Description: The issue allows SQL injection via several fields, including upload thumbnail, Queue Search Field, Subscribers Search Field, or Newsletters Search Field. Recommendations: For version...