Vulnerabilities

TI-2020-10963 CVE-2020-13996 · GHSA-8x2p-696j-45pc

The J2Store plugin before 3.3.13 for Joomla! allows a SQL injection attack by a trusted store manager.

MEDIUM 41

The J2Store plugin before 3.3.13 for Joomla! allows a SQL injection attack by a trusted store manager.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01343 Published 2020-06-09 No fix listed CWE-89

TI-2019-06644 CVE-2019-9184 · GHSA-3ww3-6whr-vv99

SQL injection vulnerability in the J2Store plugin 3.x before 3.3.7 for Joomla! allows…

MEDIUM 54

SQL injection vulnerability in the J2Store plugin 3.x before 3.3.7 for Joomla! allows remote attackers to execute arbitrary SQL commands via the product_option[] parameter.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.0898 Published 2019-02-26 No fix listed CWE-89

TI-2015-05469 CVE-2015-6513 · GHSA-5r94-8g6m-q6vg

Multiple SQL injection vulnerabilities in the J2Store (com_j2store) extension before…

LOW 37

Multiple SQL injection vulnerabilities in the J2Store (com_j2store) extension before 3.1.7 for Joomla! allow remote attackers to execute arbitrary SQL commands via the (1) sortby or (2) manufacturer_ids[] parameter to in…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02167 Published 2015-08-18 No fix listed CWE-89

Vulnerabilities

Filters

The J2Store plugin before 3.3.13 for Joomla! allows a SQL injection attack by a trusted store manager.

SQL injection vulnerability in the J2Store plugin 3.x before 3.3.7 for Joomla! allows…

Multiple SQL injection vulnerabilities in the J2Store (com_j2store) extension before…