S@BUN

147 exploits Active since May 2004
EIP-2026-108157 EXPLOITDB text WORKING POC
Joomla! / Mambo Component com_team - SQL Injection
EIP-2026-108156 EXPLOITDB text WORKING POC
Joomla! / Mambo Component com_smslist - 'listid' SQL Injection
CVE-2008-0816 EXPLOITDB text WORKING POC
com_sg - SQL Injection via pid Parameter
SQL injection vulnerability in the com_sg component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the pid parameter in an order task.
EIP-2026-108155 EXPLOITDB text WORKING POC
Joomla! / Mambo Component com_sermon 0.2 - 'gid' SQL Injection
CVE-2008-0810 EXPLOITDB text WORKING POC
com_scheduling_component - SQL Injection via id Parameter
SQL injection vulnerability in the com_scheduling module for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2008-0854 EXPLOITDB text WORKING POC
com_salesrep - SQL Injection via rid Parameter
SQL injection vulnerability in the com_salesrep component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the rid parameter in a showrep action to index.php.
CVE-2008-0846 EXPLOITDB text WORKING POC
Joomla! com_profile - SQL Injection via oid Parameter
SQL injection vulnerability in index.php in the com_profile component for Joomla! allows remote attackers to execute arbitrary SQL commands via the oid parameter.
EIP-2026-108153 EXPLOITDB text WORKING POC
Joomla! / Mambo Component com_omnirealestate - 'objid' SQL Injection
EIP-2026-108152 EXPLOITDB text WORKING POC
Joomla! / Mambo Component com_most - 'secid' SQL Injection
EIP-2026-108151 EXPLOITDB text WORKING POC
Joomla! / Mambo Component com_model - 'objid' SQL Injection
EIP-2026-108150 EXPLOITDB text WORKING POC
Joomla! / Mambo Component com_lexikon - 'id' SQL Injection
EIP-2026-108149 EXPLOITDB text WORKING POC
Joomla! / Mambo Component com_Joomlavvz - 'id' SQL Injection
EIP-2026-108147 EXPLOITDB text WORKING POC
Joomla! / Mambo Component com_iomezun - 'id' SQL Injection
EIP-2026-108145 EXPLOITDB text WORKING POC
Joomla! / Mambo Component com_iigcatalog - 'cat' SQL Injection
EIP-2026-108144 EXPLOITDB text WORKING POC
Joomla! / Mambo Component com_hello_world - 'id' SQL Injection
EIP-2026-108142 EXPLOITDB text WORKING POC
Joomla! / Mambo Component com_genealogy - 'id' SQL Injection
EIP-2026-108141 EXPLOITDB text WORKING POC
Joomla! / Mambo Component com_formtool - 'catid' SQL Injection
CVE-2008-0853 EXPLOITDB text WORKING POC
com_detail - SQL Injection via id Parameter
SQL injection vulnerability in the com_detail component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php. NOTE: this issue might be site-specific. If so, it should not be included in CVE.
EIP-2026-108138 EXPLOITDB text WORKING POC
Joomla! / Mambo Component com_buslicense - 'aid' SQL Injection
EIP-2026-108136 EXPLOITDB text WORKING POC
Joomla! / Mambo Component com_asortyment - 'katid' SQL Injection
EIP-2026-108135 EXPLOITDB text WORKING POC
Joomla! / Mambo Component com_activities - 'id' SQL Injection
EIP-2026-108134 EXPLOITDB text WORKING POC
Joomla! / Mambo Component Cinema 1.0 - 'id' SQL Injection
EIP-2026-108164 EXPLOITDB text WORKING POC
Joomla! / Mambo Component faq - 'catid' SQL Injection
EIP-2026-108161 EXPLOITDB text WORKING POC
Joomla! / Mambo Component Download3000 1.0 - 'id' SQL Injection
CVE-2008-7033 EXPLOITDB text WORKING POC
Simple Shop Galore (com_simpleshop) - SQL Injection via Section Parameter
SQL injection vulnerability in the Simple Shop Galore (com_simpleshop) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the section parameter in a section action to index.php, a different vulnerability than CVE-2008-2568. NOTE: this issue was disclosed by an unreliable researcher, so the details might be incorrect.