CVSS: 7.5EPSS: 0%CPEs: 3EXPL: 0CVE-2012-5230
https://notcve.org/view.php?id=CVE-2012-5230
Unspecified vulnerability in the JE Story Submit (com_jesubmit) component before 1.9 for Joomla! has unknown impact and attack vectors. Vulnerabilidad no especificada en el componente JE Story Submit (com_jesubmit) anteriores a v1.9 para Joomla! tiene vectores de ataque e impacto desconocidos. • http://joomlaextensions.co.in/product/JE-Story-Submit http://osvdb.org/78527 http://secunia.com/advisories/47728 http://www.securityfocus.com/bid/51679 https://exchange.xforce.ibmcloud.com/vulnerabilities/72750 •
CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 3CVE-2010-5022 – Joomla! Component jesubmit 1.4 - SQL Injection
https://notcve.org/view.php?id=CVE-2010-5022
SQL injection vulnerability in the JExtensions JE Story Submit (com_jesubmit) component 1.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the view parameter to index.php. Vulnerabilidad de inyección SQL en el comonente JExtensions JE Story Submit (com_jesubmit) v1.4 para Joomla!, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro "view " sobre index.php. • https://www.exploit-db.com/exploits/14054 http://www.exploit-db.com/exploits/14054 http://www.securityfocus.com/bid/41171 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •