CVE-2015-2562

Multiple SQL injection vulnerabilities in the Web-Dorado ECommerce WD comecommercewd component 1.2.5 for Joomla! allow remote attackers to execute arbitrary SQL commands via the 1 searchcategoryid, 2 sortorder, or 3 filtermanufacturerids in a displayproducts action to index.php...

CVE-2015-2562

Multiple SQL injection vulnerabilities in the Web-Dorado ECommerce WD comecommercewd component 1.2.5 for Joomla! allow remote attackers to execute arbitrary SQL commands via the 1 searchcategoryid, 2 sortorder, or 3 filtermanufacturerids in a displayproducts action to index.php...

CVE-2015-2562

The CVE-2015-2562 entry concerns the Web-Dorado ECommerce WD (com_ecommercewd) Joomla! component, version 1.2.5, with SQL injection in the displayproducts operation. The vulnerability allows unauthenticated remote attackers to inject SQL via the parameters search_category_id, sort_order, or filte...

Web-Dorado ECommerce WD for Joomla! search_category_id SQL Injection Scanner

This module will scan for hosts vulnerable to an unauthenticated SQL injection within the advanced search feature of the Web-Dorado ECommerce WD 1.2.5 and likely prior. Module Options msf use auxiliary/scanner/http/joomla/ecommercewdsqliscanner msf undefinedecommercewdsqliscanner show actions...