Harmistechnology : Security Vulnerabilities, CVEs, CVSS score >= 8
An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. It is possible to perform an action within the context of the account of another user.
Max CVSS
8.8
EPSS Score
0.10%
Published
2019-03-29
Updated
2023-02-03
An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. Input does not get validated and queries are not written in a way to prevent SQL injection. Therefore arbitrary SQL-Statements can be executed in the database.
Max CVSS
9.1
EPSS Score
0.11%
Published
2019-03-29
Updated
2023-02-28
router.php in the Harmis Ek rishta (aka ek-rishta) 2.10 component for Joomla! allows SQL Injection via the PATH_INFO to a home/requested_user/Sent%20interest/ URI.
Max CVSS
8.8
EPSS Score
0.13%
Published
2018-06-12
Updated
2018-08-02
SQL Injection exists in the Ek Rishta 2.9 component for Joomla! via the gender, age1, age2, religion, mothertounge, caste, or country parameter.
Max CVSS
9.8
EPSS Score
0.28%
Published
2018-02-22
Updated
2020-06-03
4 vulnerabilities found