117567vdb entry
http://osvdb.org/show/osvdb/117567 CVE-2015-1477
jclassifiedsmanager - Multiple Vulnerabilities
Record summary
CVE-2015-1477 has a selected CVSS score of 7.5; EIP currently links 1 catalogued exploit.
Description
SQL injection vulnerability in the CMSJunkie J-ClassifiedsManager component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a viewad task to classifieds/offerring-ads.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBjclassifiedsmanager - Multiple VulnerabilitiesExploitDB exploitby Sarath NairNot analyzed1 file
References
4packetstormsecurity.com
http://packetstormsecurity.com/files/130093/JClassifiedsManager-Cross-Site-Scripting-SQL-Injection.html 35911exploit
http://www.exploit-db.com/exploits/35911 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2015-1477