Monthly Archive: February 2018

SQL Injection exists in the Timetable Responsive Schedule 1.5 component for Joomla! via a view=event&alias= request. Date published : 2018-02-17 https://exploit-db.com/exploits/44130

SQL Injection exists in the Google Map Landkarten through 4.2.3 component for Joomla! via the cid or id parameter in a layout=form_markers action, or the map parameter in a layout=default action. Date published :...

SQL Injection exists in the InviteX 3.0.5 component for Joomla! via the invite_type parameter in a view=invites action. Date published : 2018-02-17 https://exploit-db.com/exploits/44114

SQL Injection exists in the Fastball 2.5 component for Joomla! via the season parameter in a view=player action. Date published : 2018-02-17 https://exploit-db.com/exploits/44109

SQL Injection exists in the JB Bus 2.3 component for Joomla! via the order_number parameter. Date published : 2018-02-17 https://exploit-db.com/exploits/44115

SQL Injection exists in the NeoRecruit 4.1 component for Joomla! via the (1) PATH_INFO or (2) name of a .html file under the all-offers/ URI. Date published : 2018-02-17 https://exploit-db.com/exploits/44123

SQL Injection exists in the JomEstate PRO through 3.7 component for Joomla! via the id parameter in a task=detailed action. Date published : 2018-02-17 https://exploit-db.com/exploits/44117

SQL Injection exists in the JS Autoz 1.0.9 component for Joomla! via the vtype, pre, or prs parameter. Date published : 2018-02-17 https://exploit-db.com/exploits/44119

SQL Injection exists in the Realpin through 1.5.04 component for Joomla! via the pinboard parameter. Date published : 2018-02-17 https://exploit-db.com/exploits/44125

SQL Injection exists in the File Download Tracker 3.0 component for Joomla! via the dynfield[phone] or sess parameter. Date published : 2018-02-17 https://exploit-db.com/exploits/44110

SQL Injection exists in the JS Jobs 1.1.9 component for Joomla! via the zipcode parameter in a newest-jobs request, or the ta parameter in a view_resume request. Date published : 2018-02-17 https://exploit-db.com/exploits/44120

SQL Injection exists in the Aist through 2.0 component for Joomla! via the id parameter in a view=showvacancy request. Date published : 2018-02-17 https://exploit-db.com/exploits/44106

SQL Injection exists in the Staff Master through 1.0 RC 1 component for Joomla! via the name parameter in a view=staff request. Date published : 2018-02-17 https://exploit-db.com/exploits/44129

SQL Injection exists in the Form Maker 3.6.12 component for Joomla! via the id, from, or to parameter in a view=stats request, a different vulnerability than CVE-2015-2798. Date published : 2018-02-17 https://exploit-db.com/exploits/44111