CVE-2009-4679

Joomla! Portfolio Nexus 1.5 (inertialFATE iF com_if_nexus) has a remote file inclusion vulnerability that allows an attacker to include and execute local files via a .. in the controller parameter to index.php. This is a classic RFI in the component, enabling arbitrary code execution on vulnerabl...

CVE-2009-4057

The CVE-2009-4057 issue affects the Joomla! component inertialFATE iF Portfolio Nexus (com_if_nexus) version 1.1. The root cause is an SQL injection via the id parameter in an item action to index.php, enabling remote execution of arbitrary SQL commands. This yields partial confidentiality, integ...