joomlayanc-sql.txt

/---------------------------------------------------------------\ \ / / Joomla Component YaNC Remote SQL injection \ \ / ---------------------------------------------------------------/ Author : His0k4 ALGERIAN HaCkEr Dork : inurl:comyanc listid POC :...

CVE-2007-2792

CVE-2007-2792 affects the YaNC (com_yanc) Newsletter component for Mambo/Joomla! prior to 1.5 beta 3. The vulnerability is a SQL injection in the listid parameter (index.php / yanc.html.php showPageHeader), allowing remote attackers to manipulate database queries and potentially disclose or modif...

YaNC Component for Joomla! 'listid' Parameter SQLi

The version of the YaNC component for Joomla! and Mambo running on the remote host is affected by a SQL injection vulnerability in the components/comyanc/yanc.html.php script due to improper sanitization of user-supplied input to the 'listid' parameter before using it to construct database querie...