Vulnerabilities

Filters

1 selected

24 records

Sort

Vendor: harmistechnology Clear all filters

TI-2018-15576 CVE-2018-25351 · GHSA-3g55-qf36-hjqr

Joomla! Component EkRishta 2.10 SQL Injection via username

HIGH 77

Joomla! Component EkRishta 2.10 contains an error-based SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code into the username parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00358 Published 2026-05-23 No fix listed CWE-89

TI-2018-15573 CVE-2018-25348 · GHSA-rrm4-c4hh-wqg7

Joomla! Component Ek Rishta 2.10 SQL Injection via user_detail

HIGH 77

Joomla! Component Ek Rishta 2.10 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the cid parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00358 Published 2026-05-23 No fix listed CWE-89

TI-2019-07293 CVE-2019-9922 · GHSA-235p-3pcw-3hqj

An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!.

MEDIUM 45

An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.10228 Published 2019-03-29 No fix listed CWE-22

TI-2019-07292 CVE-2019-9921 · GHSA-5rpx-89mq-44f9

An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!.

LOW 31

An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01107 Published 2019-03-29 No fix listed CWE-639

TI-2019-07291 CVE-2019-9920 · GHSA-vq22-g44v-mx73

An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!.

MEDIUM 41

An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01315 Published 2019-03-29 No fix listed

TI-2019-07290 CVE-2019-9919 · GHSA-rgj4-7g43-x7m2

An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!.

LOW 26

An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00665 Published 2019-03-29 No fix listed CWE-79

TI-2019-07289 CVE-2019-9918 · GHSA-rqr3-6mhm-p5j2

An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!.

MEDIUM 42

An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01278 Published 2019-03-29 No fix listed CWE-89

TI-2018-08790 CVE-2018-12254 · GHSA-4359-9c9p-4q45

router.php in the Harmis Ek rishta (aka ek-rishta) 2.10 component for Joomla! allows SQL…

MEDIUM 43

router.php in the Harmis Ek rishta (aka ek-rishta) 2.10 component for Joomla! allows SQL Injection via the PATH_INFO to a home/requested_user/Sent%20interest/ URI.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.0249 Published 2018-06-12 No fix listed CWE-89

TI-2018-05306 CVE-2018-7315 · GHSA-p5mw-fhwg-44cf

SQL Injection exists in the Ek Rishta 2.9 component for Joomla! via the gender, age1…

MEDIUM 47

SQL Injection exists in the Ek Rishta 2.9 component for Joomla! via the gender, age1, age2, religion, mothertounge, caste, or country parameter.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02652 Published 2018-02-22 No fix listed CWE-89

TI-2012-04416 CVE-2012-5230 · GHSA-3vjc-wc96-396x

Unspecified vulnerability in the JE Story Submit (com_jesubmit) component before 1.9 for…

LOW 35

Unspecified vulnerability in the JE Story Submit (com_jesubmit) component before 1.9 for Joomla! has unknown impact and attack vectors.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01308 Published 2012-10-01 No fix listed

TI-2010-04751 CVE-2010-5028 · GHSA-hwvw-6p8w-r2wh

SQL injection vulnerability in the JExtensions JE Job (com_jejob) component 1.0 for…

MEDIUM 45

SQL injection vulnerability in the JExtensions JE Job (com_jejob) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in an item action to index.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.09247 Published 2011-11-02 No fix listed CWE-89

TI-2010-04745 CVE-2010-5022 · GHSA-gj44-hfvc-7hpp

SQL injection vulnerability in the JExtensions JE Story Submit (com_jesubmit) component…

LOW 35

SQL injection vulnerability in the JExtensions JE Story Submit (com_jesubmit) component 1.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the view parameter to index.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00907 Published 2011-11-02 No fix listed CWE-89

TI-2010-04588 CVE-2010-4865 · GHSA-ghxm-jmwh-2vrh

SQL injection vulnerability in the JE Guestbook (com_jeguestbook) component 1.0 for…

LOW 36

SQL injection vulnerability in the JE Guestbook (com_jeguestbook) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the d_itemid parameter in an item_detail action to index.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01586 Published 2011-10-05 No fix listed CWE-89

TI-2010-04585 CVE-2010-4862 · GHSA-r655-qf5q-vw86

SQL injection vulnerability in the JExtensions JE Directory (com_jedirectory) component…

LOW 35

SQL injection vulnerability in the JExtensions JE Directory (com_jedirectory) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in an item action to index.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01021 Published 2011-10-05 No fix listed CWE-89

TI-2010-04443 CVE-2010-4720 · GHSA-5j5x-964m-mjxj

SQL injection vulnerability in the JExtensions JE Auto (com_jeauto) component before 1.1…

LOW 36

SQL injection vulnerability in the JExtensions JE Auto (com_jeauto) component before 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via unspecified vectors related to the view item page.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01722 Published 2011-02-01 No fix listed CWE-89

TI-2010-04247 CVE-2010-4517 · GHSA-h2px-g8j6-wrxv

SQL injection vulnerability in the JExtensions JE Auto (com_jeauto) component 1.0 for…

LOW 32

SQL injection vulnerability in the JExtensions JE Auto (com_jeauto) component 1.0 for Joomla!, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the char parameter in an ite…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.0095 Published 2010-12-09 No fix listed CWE-89

TI-2010-04098 CVE-2010-4365 · GHSA-j26x-q7rm-v2xv

SQL injection vulnerability in JE Ajax Event Calendar (com_jeajaxeventcalendar) component…

LOW 35

SQL injection vulnerability in JE Ajax Event Calendar (com_jeajaxeventcalendar) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the event_id parameter in an alleventlist_more action to…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0098 Published 2010-12-01 No fix listed CWE-89

TI-2010-02570 CVE-2010-2680 · GHSA-w292-3r2c-wh6c

Directory traversal vulnerability in the JExtensions JE Section/Property Finder…

LOW 38

Directory traversal vulnerability in the JExtensions JE Section/Property Finder (jesectionfinder) component for Joomla! allows remote attackers to include and execute arbitrary local files via directory traversal sequenc…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.04848 Published 2010-07-09 No fix listed CWE-22

TI-2010-02503 CVE-2010-2613 · GHSA-7gwq-jm8c-29xc

Cross-site scripting (XSS) vulnerability in the JExtensions JE Awd Song (com_awd_song)…

LOW 23

Cross-site scripting (XSS) vulnerability in the JExtensions JE Awd Song (com_awd_song) component for Joomla! allows remote attackers to inject arbitrary web script or HTML via the song review field, which is not properly…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01598 Published 2010-07-01 No fix listed CWE-79

TI-2010-02412 CVE-2010-2513 · GHSA-5rwf-hpx5-32g3

SQL injection vulnerability in the JE Ajax Event Calendar (com_jeajaxeventcalendar)…

LOW 35

SQL injection vulnerability in the JE Ajax Event Calendar (com_jeajaxeventcalendar) component 1.0.5 for Joomla! allows remote attackers to execute arbitrary SQL commands via the view parameter to index.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01112 Published 2010-06-28 No fix listed CWE-89

TI-2010-02041 CVE-2010-2129 · GHSA-5x5p-c5pf-7mmq

Directory traversal vulnerability in the JE Ajax Event Calendar (com_jeajaxeventcalendar)…

LOW 38

Directory traversal vulnerability in the JE Ajax Event Calendar (com_jeajaxeventcalendar) component 1.0.1 and 1.0.3 for Joomla! allows remote attackers to read arbitrary files via a ..

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.04973 Published 2010-06-01 No fix listed CWE-22

TI-2010-02040 CVE-2010-2128 · GHSA-7f48-gjxv-cppw

Directory traversal vulnerability in the JE Quotation Form (com_jequoteform) component…

MEDIUM 49

Directory traversal vulnerability in the JE Quotation Form (com_jequoteform) component 1.0b1 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a ..

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.15821 Published 2010-06-01 No fix listed CWE-22

TI-2010-00759 CVE-2010-0796 · GHSA-qx3x-f526-c288

SQL injection vulnerability in the JE Quiz (com_jequizmanagement) component 1.b01 for…

LOW 35

SQL injection vulnerability in the JE Quiz (com_jequizmanagement) component 1.b01 for Joomla! allows remote attackers to execute arbitrary SQL commands via the eid parameter in a question action to index.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01151 Published 2010-03-02 No fix listed CWE-89

TI-2010-00758 CVE-2010-0795 · GHSA-9399-p33p-285c

SQL injection vulnerability in the JE Event Calendars (com_jeeventcalendar) component 1.0…

LOW 35

SQL injection vulnerability in the JE Event Calendars (com_jeeventcalendar) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the event_id parameter in an event action to index.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01003 Published 2010-03-02 No fix listed CWE-89