7 matches found
CVE-2018-6373
SQL Injection exists in the Fastball 2.5 component for Joomla! via the season parameter in a view=player action...
CVE-2018-6373
SQL Injection exists in the Fastball 2.5 component for Joomla! via the season parameter in a view=player action...
CVE-2018-6373
SQL Injection exists in the Fastball 2.5 component for Joomla! via the season parameter in a view=player action...
CVE-2018-6373: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection exists in the Fastball 2.5 component for Joomla! via the season parameter in a view=player action...
Joomla Fastball 3.2.8 SQL Injection
Exploit Title: Joomla Component Fastball 3.2.8 - SQL Injection Date: 2017-02-11 Home : https://extensions.joomla.org/extensions/extension/sports-a-games/sports/fastball/ Exploit Author: Persian Hack Team Discovered by : Mojtaba MobhaM [email protected] Home : http://persian-team.ir/ Telegram...
CVE-2012-2912: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in the LeagueManager plugin 3.7 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 group parameter in the show-league page or 2 season parameter in the team page to wp-admin/admin.php...
CVE-2009-3971: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the jTips comjtips component 1.0.7 and 1.0.9 for Joomla! allows remote attackers to execute arbitrary SQL commands via the season parameter in a ladder action to index.php...