Bug Sicurezza Joomla e dei suoi componenti 2009 - Aggiornato al 30-10-09

[alexred]

Vulnerable Extensions List

30-10-09   Componente Jumi 2.0.5 backdoored
07-05-09   Joomla Almond Classifieds 5.6.2 Blind SQL Injection Vuln
22-04-09   Joomla Component rsmonials Remote Cross Site Scxripting Exploit
08-04-09   Joomla Component Cmimarketplace (viewit) Directory Traversal Vuln
08-04-09   Joomla Component MailTo (article) SQL Injection Vulnerability
08-04-09   Joomla Component Maian Music 1.2.1 (category) SQL Injection Vuln
06-04-09   Joomla Component com_bookjoomlas 0.1 SQL Injection Vulnerability
12-03-09   Joomla Djice Shoutbox 1.0 Permanent XSS Vulnerability
06-03-09   Joomla com_ijoomla_archive Blind SQL Injection Exploit
04-03-09   Joomla com_carman 2.x (Itemid) Remote SQL Injection Exploit
04-03-09   Joomla com_reservation (Itemid) Remote SQL Injection Exploit
03-03-09   Joomla com_digistore (pid) Blind SQL Injection Exploit
03-03-09   Joomla-Mambo Component eXtplorer Code Execution Vulnerability
27-01-09   Joomla com_flashmagazinedeluxe (mag_id) SQL Injection Vulnerability
21-01-09   Joomla com_pcchess (game_id) Blind SQL Injection Exploit
21-01-09   Joomla Component beamospetition 1.0.12 SQL Injection - XSS
21-01-09   Joomla Com BazaarBuilder Shopping Cart v.5.0 SQL Injection Exploit
19-01-09   Joomla com_waticketsystem Blind SQL Injection Exploit
19-01-09   Joomla Component com_news SQL Injection Vulnerability
19-01-09   Joomla com_pccookbook (recipe_id) Blind SQL Injection Exploit
19-01-09   Joomla Component Gigcal 1.x (id) SQL Injection Vulnerability
15-01-09   Joomla com_Eventing 1.6.x Blind SQL Injection Exploit
14-01-09   Joomla Component Camelcitydb2 2.2 SQL Injection Vulnerabilities
14-01-09   Joomla Component Fantasytournament SQL Injection Vulnerabilities
13-01-09   Joomla Component com_gigcal (gigcal_gigs_id) SQL Injection Vuln
12-01-09   Joomla Component Portfol (vcatid) SQL Injection Vulnerability
12-01-09   Joomla com_xevidmegahd (catid) Remote SQL Injection Exploit
12-01-09   Joomla com_jashowcase (catid) Remote SQL Injection Exploit
12-01-09   Joomla com_newsflash (id) Remote SQL Injection Vulnerability
07-01-09   Joomla <= 1.5.8 (xstandard editor) Local Directory Traversal Vulnerability
06-01-09   Joomla com_phocadocumentation (id) Remote SQL Injection Exploit
05-01-09   Joomla com_na_newsdescription (newsid) SQL Injection Exploit
05-01-09   Joomla Component simple_review 1.x SQL Injection Vulnerability