CVE-2018-6373

SQL Injection exists in the Fastball 2.5 component for Joomla! via the season parameter in a view=player action...

CVE-2018-6373

SQL Injection exists in the Fastball 2.5 component for Joomla! via the season parameter in a view=player action...

CVE-2018-6373

SQL Injection exists in the Fastball 2.5 component for Joomla! via the season parameter in a view=player action...

CVE-2018-6373: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in the Fastball 2.5 component for Joomla! via the season parameter in a view=player action...

PT-2018-17513

Name of the Vulnerable Software and Affected Versions Joomla! Fastball component version 2.5 Description A SQL Injection issue exists in the Fastball component for Joomla!, specifically via the season parameter in a "view=player" action. Recommendations For Joomla! Fastball component version 2.5,...

Joomla Fastball 3.2.8 SQL Injection

Exploit Title: Joomla Component Fastball 3.2.8 - SQL Injection Date: 2017-02-11 Home : https://extensions.joomla.org/extensions/extension/sports-a-games/sports/fastball/ Exploit Author: Persian Hack Team Discovered by : Mojtaba MobhaM [email protected] Home : http://persian-team.ir/ Telegram...

CVE-2012-2912

Multiple cross-site scripting XSS vulnerabilities in the LeagueManager plugin 3.7 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 group parameter in the show-league page or 2 season parameter in the team page to wp-admin/admin.php...

CVE-2012-2912: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the LeagueManager plugin 3.7 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 group parameter in the show-league page or 2 season parameter in the team page to wp-admin/admin.php...

PT-2012-4358

Name of the Vulnerable Software and Affected Versions LeagueManager plugin version 3.7 for WordPress Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the group parameter in the "show-league" page or the season parameter in the "team"...

CVE-2009-3971: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the jTips comjtips component 1.0.7 and 1.0.9 for Joomla! allows remote attackers to execute arbitrary SQL commands via the season parameter in a ladder action to index.php...