Ihsan Sencan

985 exploits Active since Sep 2017
CVE-2018-5985 EXPLOITDB CRITICAL text WORKING POC
LiveCRM SaaS Cloud 1.0 - SQL Injection
SQL Injection exists in the LiveCRM SaaS Cloud 1.0 component for Joomla! via an r=site/login&company_id= request.
CVSS 9.8
EIP-2026-109371 EXPLOITDB text WORKING POC
MC Inventory Manager Script - Multiple Vulnerabilities
EIP-2026-109345 EXPLOITDB text WORKING POC
Matrix MLM Script 1.0 - Information Disclosure
EIP-2026-109185 EXPLOITDB text WRITEUP
LiveProjects 1.0 - SQL Injection
EIP-2026-109319 EXPLOITDB text WRITEUP
Manufacturer Website Design Script - SQL Injection
CVE-2018-7319 EXPLOITDB CRITICAL text WRITEUP
OS Property Real Estate 3.12.7 - SQL Injection via Cooling System, Heating System, or Laundry Parameter
SQL Injection exists in the OS Property Real Estate 3.12.7 component for Joomla! via the cooling_system1, heating_system1, or laundry parameter.
CVSS 9.8
EIP-2026-108891 EXPLOITDB text WRITEUP
Joomla! Component Vik Rent Car 1.11 - SQL Injection
EIP-2026-108764 EXPLOITDB text WORKING POC
Joomla! Component JSP Store Locator 2.2 - 'id' SQL Injection
EIP-2026-108880 EXPLOITDB text WRITEUP
Joomla! Component Team Display 1.2.1 - 'filter_category' SQL Injection
CVE-2018-17394 EXPLOITDB CRITICAL text WRITEUP
Joomla! Timetable Schedule <3.6.8 - SQL Injection
SQL Injection exists in the Timetable Schedule 3.6.8 component for Joomla! via the eid parameter.
CVSS 9.8
EIP-2026-108869 EXPLOITDB text WRITEUP
Joomla! Component Spider Facebook 1.6.1 - SQL Injection
EIP-2026-108938 EXPLOITDB text WRITEUP
Just Another Video Script 1.4.3 - SQL Injection
EIP-2026-108819 EXPLOITDB text WORKING POC
Joomla! Component OS Services Booking 2.5.1 - SQL Injection
CVE-2018-6370 EXPLOITDB CRITICAL text WORKING POC
NeoRecruit 4.1 - SQL Injection via PATH_INFO or .html File Name
SQL Injection exists in the NeoRecruit 4.1 component for Joomla! via the (1) PATH_INFO or (2) name of a .html file under the all-offers/ URI.
CVSS 9.8
EIP-2026-108884 EXPLOITDB text WORKING POC
Joomla! Component UserExtranet 1.3.1 - SQL Injection
CVE-2018-7177 EXPLOITDB CRITICAL text WORKING POC
Saxum Numerology 3.0.4 - SQL Injection via publicid Parameter
SQL Injection exists in the Saxum Numerology 3.0.4 component for Joomla! via the publicid parameter.
CVSS 9.8
EIP-2026-108849 EXPLOITDB text WORKING POC
Joomla! Component Room Management 1.0 - SQL Injection
EIP-2026-109040 EXPLOITDB text WORKING POC
KORA 2.7.0 - 'cid' SQL Injection
CVE-2018-17377 EXPLOITDB CRITICAL text WORKING POC
Questions 1.4.3 - SQL Injection via Term Userid Users or Groups Parameter
SQL Injection exists in the Questions 1.4.3 component for Joomla! via the term, userid, users, or groups parameter.
CVSS 9.8
EIP-2026-108814 EXPLOITDB text WORKING POC
Joomla! Component OneVote! 1.0 - SQL Injection
CVE-2018-5994 EXPLOITDB CRITICAL text WORKING POC
JS Jobs 1.1.9 - SQL Injection via Zipcode or ta Parameter
SQL Injection exists in the JS Jobs 1.1.9 component for Joomla! via the zipcode parameter in a newest-jobs request, or the ta parameter in a view_resume request.
CVSS 9.8
EIP-2026-108941 EXPLOITDB text WORKING POC
Just Dial Marketplace - Authentication Bypass
CVE-2017-17618 EXPLOITDB CRITICAL text WRITEUP
Kickstarter Clone Script 2.0 - SQL Injection via investcalc.php projid Parameter
Kickstarter Clone Script 2.0 has SQL Injection via the investcalc.php projid parameter.
CVSS 9.8
EIP-2026-108767 EXPLOITDB text WRITEUP
Joomla! Component JUX EventOn 1.0.1 - 'id' SQL Injection
CVE-2018-6006 EXPLOITDB CRITICAL text WORKING POC
JS Autoz 1.0.9 - SQL Injection via vtype, pre, or prs Parameter
SQL Injection exists in the JS Autoz 1.0.9 component for Joomla! via the vtype, pre, or prs parameter.
CVSS 9.8