XSS and SQLi in Huge IT Joomla Slider v1.0.9 extension
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Link | Tags |
---|---|
http://extensions.joomla.org/extensions/extension/photos-a-images/slider | product |
http://www.vapidlabs.com/advisory.php?v=168 | exploit vendor advisory |
http://www.securityfocus.com/bid/92160 | vdb entry |