CVE-2011-4829

Barter Sites com_listing 1.3 - SQL Injection via category_id Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2011-4829. PoCs published by Chris Russell.

AI-analyzed exploit summary This is a vulnerability writeup describing SQL injection and persistent XSS vulnerabilities in Barter Sites 1.3 for Joomla. It provides technical details on exploitation vectors but does not include executable exploit code.

Description

SQL injection vulnerability in the com_listing component in Barter Sites component 1.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the category_id parameter to index.php.

Exploits (1)

exploitdb WRITEUP VERIFIED
by Chris Russell · textwebappsphp
https://www.exploit-db.com/exploits/18046

This is a vulnerability writeup describing SQL injection and persistent XSS vulnerabilities in Barter Sites 1.3 for Joomla. It provides technical details on exploitation vectors but does not include executable exploit code.

Classification
Writeup 90%
Attack Type
Sqli | Xss
Complexity
Trivial
Reliability
Theoretical
Target: Barter Sites 1.3 for Joomla
Auth required
Prerequisites: Access to the Joomla instance with Barter Sites component installed · User registration for XSS exploitation
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (3)

Core 3

Scores

EPSS 0.0109
EPSS Percentile 61.2%

Details

CWE
CWE-89
Status published
Products (1)
barter-sites/com_listing 1.3
Published Dec 15, 2011
Tracked Since Feb 18, 2026