Ihsan Sencan

985 exploits Active since Sep 2017
EIP-2026-108704 EXPLOITDB text WORKING POC
Joomla! Component JE K2 Multiple Form Story 1.3 - 'Itemid' SQL Injection
EIP-2026-108702 EXPLOITDB text WORKING POC
Joomla! Component JE Grid Folio - 'id' SQL Injection
EIP-2026-108701 EXPLOITDB text WORKING POC
Joomla! Component JE Gallery 1.3 - 'photo_id' SQL Injection
EIP-2026-108700 EXPLOITDB text WORKING POC
Joomla! Component JE Form Creator 1.8 - 'Itemid' SQL Injection
EIP-2026-108699 EXPLOITDB text WORKING POC
Joomla! Component JE Directory 1.7 - 'ditemid' SQL Injection
EIP-2026-108698 EXPLOITDB text WORKING POC
Joomla! Component JE Classify Ads 1.2 - 'pro_id' SQL Injection
EIP-2026-108697 EXPLOITDB text WORKING POC
Joomla! Component JE Awd Song 1.8 - SQL Injection
EIP-2026-108696 EXPLOITDB text WORKING POC
Joomla! Component JE Auto 1.5 - 'd_itemid' SQL Injection
EIP-2026-108694 EXPLOITDB text WORKING POC
Joomla! Component JE auction 1.6 - 'eid' SQL Injection
CVE-2017-17870 EXPLOITDB CRITICAL text WORKING POC
JBuildozer 1.4.1 - SQL Injection via appid Parameter
The JBuildozer extension 1.4.1 for Joomla! has SQL Injection via the appid parameter in an entriessearch action.
CVSS 9.8
CVE-2018-6372 EXPLOITDB CRITICAL text WORKING POC
JB Bus 2.3 - SQL Injection via order_number Parameter
SQL Injection exists in the JB Bus 2.3 component for Joomla! via the order_number parameter.
CVSS 9.8
EIP-2026-108686 EXPLOITDB text WRITEUP
Joomla! Component J-MultipleHotelReservation Standard 6.0.2 - 'review_id' SQL Injection
EIP-2026-108685 EXPLOITDB text WORKING POC
Joomla! Component J-HotelPortal 6.0.2 - 'review_id' SQL Injection
EIP-2026-108684 EXPLOITDB text WRITEUP
Joomla! Component J-CruiseReservation Standard 3.0 - 'city' SQL Injection
EIP-2026-108192 EXPLOITDB text WORKING POC
Joomla! Component Abstract 2.1 - SQL Injection
EIP-2026-108680 EXPLOITDB text WRITEUP
Joomla! Component J-BusinessDirectory 4.6.8 - SQL Injection
CVE-2018-6394 EXPLOITDB CRITICAL text WORKING POC
InviteX 3.0.5 - SQL Injection via invite_type Parameter
SQL Injection exists in the InviteX 3.0.5 component for Joomla! via the invite_type parameter in a view=invites action.
CVSS 9.8
EIP-2026-108676 EXPLOITDB text WORKING POC
Joomla! Component Intranet Attendance Track 2.6.5 - SQL Injection
EIP-2026-108669 EXPLOITDB text WORKING POC
Joomla! Component Hbooking 1.9.9 - 'h_id' SQL Injection
EIP-2026-108668 EXPLOITDB text WORKING POC
Joomla! Component Guru Pro - 'promocode' SQL Injection
EIP-2026-108666 EXPLOITDB text WORKING POC
Joomla! Component Guesser 1.0.4 - 'type' SQL Injection
EIP-2026-108664 EXPLOITDB text WORKING POC
Joomla! Component Groovy Gallery 1.0.0 - SQL Injection
EIP-2026-108663 EXPLOITDB text WORKING POC
Joomla! Component GPS Tools 4.0.1 - SQL Injection
EIP-2026-108662 EXPLOITDB text WORKING POC
Joomla! Component Google Map Store Locator 4.4 - SQL Injection
CVE-2018-6396 EXPLOITDB CRITICAL text WORKING POC
Google Map Landkarten <= 4.2.3 - SQL Injection via cid/id/map Parameters
SQL Injection exists in the Google Map Landkarten through 4.2.3 component for Joomla! via the cid or id parameter in a layout=form_markers action, or the map parameter in a layout=default action.
CVSS 9.8