Skip to content
OpenAdvisories

Vendor

Wdmtech

7 known vulnerabilities.

Products

vBizz 2 vWishlist 1 vRestaurant 1 vReview 1 vAccount 1 VMap 1
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 7.1
    CVE-2019-25759

    Joomla! Component vBizz 1.0.7 SQL Injection

    Joomla! Component vBizz 1.0.7 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the payid parameter. Attackers can submit POST requests to the employee management i…

    Wdmtech vBizz
  • High 8.8
    CVE-2019-25758

    Joomla! Component vBizz 1.0.7 Remote Code Execution

    Joomla! Component vBizz 1.0.7 contains an unrestricted file upload vulnerability that allows authenticated attackers to upload arbitrary PHP files by submitting malicious files through the profile_pic parameter. Attackers can upload PHP files via POST request…

    Wdmtech vBizz
  • High 7.1
    CVE-2019-25757

    Joomla vWishlist 1.0.1 SQL Injection via vproductid Parameter

    Joomla vWishlist 1.0.1 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the vproductid and userid parameters. Attackers can send POST requests to the component wit…

    Wdmtech vWishlist
  • High 8.2
    CVE-2019-25756

    Joomla! Component vAccount 2.0.2 SQL Injection via vaccount-dashboard

    Joomla! Component vAccount 2.0.2 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the vid parameter. Attackers can send GET requests to the vaccount-dashboard/ex…

    Wdmtech vAccount
  • High 8.2
    CVE-2019-25755

    Joomla vReview 1.9.11 SQL Injection via editReview

    Joomla Component vReview 1.9.11 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the cmId parameter. Attackers can send POST requests to the editReview task endp…

    Wdmtech vReview
  • High 8.2
    CVE-2019-25754

    Joomla vRestaurant 1.9.4 SQL Injection via menu-listing-layout

    Joomla Component vRestaurant 1.9.4 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the keysearch parameter. Attackers can send POST requests to the menu-listing…

    Wdmtech vRestaurant
  • High 8.2
    CVE-2019-25753

    Joomla! Component VMap 1.9.6 SQL Injection via loadmarker

    Joomla! Component VMap 1.9.6 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code into the latlngbound parameter. Attackers can send GET requests to index.php with the optio…

    Wdmtech VMap