jextn records
8 published records for vendor jextn.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Attack profile
All records
8 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
40Plan | CVE-2018-6579Proof of concept | SQL Injection exists in the JEXTN Reverse Auction 3.1.0 component for Joomla! via a view=products&uid= request.jextn · reverse auction · CWE-89 | Critical9.8 | — | 3.8% | Feb 2, 2018 |
40Plan | CVE-2018-6578Proof of concept | SQL Injection exists in the JE PayperVideo 3.0.0 component for Joomla! via the usr_plan parameter in a view=myplans&task=myplans.usersubscrijextn · je paypervideo · CWE-89 | Critical9.8 | — | 3.8% | Feb 2, 2018 |
40Plan | CVE-2017-17872Proof of concept | The JEXTN Video Gallery extension 3.0.5 for Joomla! has SQL Injection via the id parameter in a view=category action.jextn · jextn video gallery · CWE-89 | Critical9.8 | — | 2.6% | Dec 27, 2017 |
40Plan | CVE-2017-17875Proof of concept | The JEXTN FAQ Pro extension 4.0.0 for Joomla! has SQL Injection via the id parameter in a view=category action.jextn · jextn faq pro · CWE-89 | Critical9.8 | — | 2.6% | Dec 27, 2017 |
40Plan | CVE-2018-6575Proof of concept | SQL Injection exists in the JEXTN Classified 1.0.0 component for Joomla! via a view=boutique&sid= request.jextn · classified · CWE-89 | Critical9.8 | — | 2.6% | Feb 2, 2018 |
40Plan | CVE-2017-17871Proof of concept | The "JEXTN Question And Answer" extension 3.1.0 for Joomla! has SQL Injection via the an parameter in a view=tags action, or the ques-srch pjextn · jextn question and answer · CWE-89 | Critical9.8 | — | 2.6% | Dec 27, 2017 |
40Plan | CVE-2018-6577Proof of concept | SQL Injection exists in the JEXTN Membership 3.1.0 component for Joomla! via the usr_plan parameter in a view=myplans&task=myplans.usersubscjextn · membership · CWE-89 | Critical9.8 | — | 1.9% | Feb 2, 2018 |
30Monitor | CVE-2010-3211Proof of concept | Multiple SQL injection vulnerabilities in the JE FAQ Pro (com_jefaqpro) component 1.5.0 for Joomla! allow remote attackers to execute arbitrjoomla · joomla\! · CWE-89 | High7.5 | — | 0.9% | Sep 3, 2010 |
- CVE-2018-657940Plan
SQL Injection exists in the JEXTN Reverse Auction 3.1.0 component for Joomla! via a view=products&uid= request.
CriticalCVSS 9.8Proof of conceptEPSS 3%jextn · reverse auctionFeb 2, 2018
- CVE-2018-657840Plan
SQL Injection exists in the JE PayperVideo 3.0.0 component for Joomla! via the usr_plan parameter in a view=myplans&task=myplans.usersubscri
CriticalCVSS 9.8Proof of conceptEPSS 3%jextn · je paypervideoFeb 2, 2018
- CVE-2017-1787240Plan
The JEXTN Video Gallery extension 3.0.5 for Joomla! has SQL Injection via the id parameter in a view=category action.
CriticalCVSS 9.8Proof of conceptEPSS 2%jextn · jextn video galleryDec 27, 2017
- CVE-2017-1787540Plan
The JEXTN FAQ Pro extension 4.0.0 for Joomla! has SQL Injection via the id parameter in a view=category action.
CriticalCVSS 9.8Proof of conceptEPSS 2%jextn · jextn faq proDec 27, 2017
- CVE-2018-657540Plan
SQL Injection exists in the JEXTN Classified 1.0.0 component for Joomla! via a view=boutique&sid= request.
CriticalCVSS 9.8Proof of conceptEPSS 2%jextn · classifiedFeb 2, 2018
- CVE-2017-1787140Plan
The "JEXTN Question And Answer" extension 3.1.0 for Joomla! has SQL Injection via the an parameter in a view=tags action, or the ques-srch p
CriticalCVSS 9.8Proof of conceptEPSS 2%jextn · jextn question and answerDec 27, 2017
- CVE-2018-657740Plan
SQL Injection exists in the JEXTN Membership 3.1.0 component for Joomla! via the usr_plan parameter in a view=myplans&task=myplans.usersubsc
CriticalCVSS 9.8Proof of conceptEPSS 1%jextn · membershipFeb 2, 2018
- CVE-2010-321130Monitor
Multiple SQL injection vulnerabilities in the JE FAQ Pro (com_jefaqpro) component 1.5.0 for Joomla! allow remote attackers to execute arbitr
HighCVSS 7.5Proof of conceptEPSS 0%joomla · joomla\!Sep 3, 2010