Ihsan Sencan

**Name of the Vulnerable Software and Affected Versions** JoomCRM version 1.1.1 **Description** An SQL injection allows authenticated attackers to execute arbitrary SQL queries. By sending GET requests to the 'index.php' endpoint with the parameters `option=com joomcrm` and `view=contacts`, attackers can inject malicious code through the `deal id` parameter to extract sensitive database information, such as table names and schemas. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Joomla Component J-MultipleHotelReservation version 6.0.7 **Description** An SQL injection allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code. This is achieved by sending POST requests to the 'search-hotels' endpoint using crafted SQL UNION SELECT statements via the `hotel id` parameter to extract sensitive database information, such as table names and column data. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** J-ClassifiedsManager version 3.0.5 **Description** An SQL injection allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through POST parameters. By submitting crafted payloads to the 'displayads' component via the `categorySearch`, `adType`, and `citySearch` parameters, attackers can extract sensitive database information, such as usernames, databases, and version details. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Joomla Component vRestaurant version 1.9.4 **Description** An SQL injection allows unauthenticated attackers to execute arbitrary SQL queries. This is achieved by sending POST requests to the 'menu-listing-layout' endpoint with malicious code injected into the `keysearch` parameter, enabling the extraction of database table names and other sensitive information. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Joomla! Component Easy Shop version 1.2.3 **Description** A local file inclusion issue allows unauthenticated attackers to read arbitrary files by providing base64-encoded file paths. This is achieved by sending GET requests to the 'index.php' endpoint with the `option` parameter set to 'com easyshop', the `task` parameter set to 'ajax.loadImage', and a base64-encoded path in the `file` parameter. This can lead to the retrieval of sensitive system files and the 'configuration.php' file. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Joomla! Component vBizz version 1.0.7 **Description** An unrestricted file upload issue allows authenticated attackers to upload arbitrary PHP files. This is achieved by submitting malicious files through the `profile pic` parameter via POST requests to the 'employee view' endpoint. Once uploaded to the uploads directory, these files can be executed to achieve remote code execution, which is the ability to run arbitrary commands on the target server. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Joomla Component vReview version 1.9.11 **Description** An SQL injection allows unauthenticated attackers to execute arbitrary SQL queries. This is achieved by sending POST requests to the 'editReview' task endpoint using URL-encoded SQL UNION statements within the `cmId` parameter. This technique enables the extraction of sensitive database information, such as usernames, passwords, and database versions. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Joomla! Component JoomProject version 1.1.3.2 **Description** An information disclosure issue allows unauthenticated attackers to access sensitive user data by exploiting the projects endpoint. By sending requests to 'index.php' using the parameters `option=com jpprojects`, `view=projects`, `tmpl=component`, and `format=json`, attackers can retrieve user IDs, names, and email addresses in JSON format. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Joomla! Component J-BusinessDirectory version 4.9.7 **Description** An SQL injection allows unauthenticated attackers to execute arbitrary SQL queries. This is achieved by injecting malicious code into the `type` parameter via GET requests to the 'index.php' endpoint using the parameters `option=com jbusinessdirectory&task=categories.getCategories`. Attackers can use UNION-based SQL statements to extract sensitive data and database schema names. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Joomla! Component VMap version 1.9.6 **Description** An SQL injection allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code into the `latlngbound` parameter. This is achieved by sending GET requests to the 'index.php' endpoint using the parameters `option=com vmap` and `task=loadmarker` to manipulate database queries and extract sensitive information. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Joomla! Component vBizz version 1.0.7 **Description** An SQL injection allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the `payid` parameter. This is achieved by submitting POST requests to the employee management interface using crafted `payid` array values, enabling the extraction of sensitive database information such as version and database names. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** JHotelReservation version 6.0.7 **Description** An SQL injection allows unauthenticated attackers to execute arbitrary SQL queries. This is achieved by sending POST requests to the 'search-hotels' endpoint with malicious code injected into the `rooms` parameter, enabling the extraction of sensitive database information such as version details. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Joomla! Component vAccount version 2.0.2 **Description** An SQL injection allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code. This is achieved by sending GET requests to the 'vaccount-dashboard/expense' endpoint using crafted SQL payloads in the `vid` parameter, which can lead to the extraction of sensitive database information such as version and database names. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, avoid using the `vid` parameter in the 'vaccount-dashboard/expense' endpoint to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Joomla vWishlist version 1.0.1 **Description** An SQL injection allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code. This is achieved by sending POST requests to the component using crafted payloads in the `vproductid` and `userid` parameters, enabling the extraction of sensitive database information such as database names and versions. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Joomla J-CruisePortal version 6.0.4 **Description** An SQL injection allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code. This is achieved by sending POST requests to the "cruises" endpoint using crafted SQL payloads in the `guest adult` parameter, which can lead to the extraction of sensitive database information or the manipulation of database records. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. Avoid using the `guest adult` parameter in the "cruises" endpoint until the issue is resolved.

eBrigade ERP 4.5 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'id' parameter. Attackers can send GET requests to pdf.php with crafted SQL payloads in the 'id' parameter to extract sensitive database information including table names and schema details.

**Name of the Vulnerable Software and Affected Versions** Tree Studio version 2.17 **Description** The software contains a denial of service issue that allows attackers with local access to disrupt the application. Attackers can cause the application to become unresponsive or terminate by providing crafted input through the keyboard interface. Specifically, entering arbitrary characters during application runtime can trigger this issue. **Recommendations** Update to a newer version of Tree Studio that addresses this issue.

**Name of the Vulnerable Software and Affected Versions** Paint Studio version 2.17 **Description** The software contains a denial of service issue that allows local attackers to cause the application to crash. Attackers can create a text file containing a large buffer of characters and trigger the application to read it, resulting in a crash and making the application unavailable. The issue occurs through the key entry mechanism when processing malformed input. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Luminance Studio version 2.17 **Description** A denial of service issue exists in Luminance Studio version 2.17. Local attackers can cause the application to crash by providing specially crafted input via the keyboard interface. Specifically, attackers can create a text file containing arbitrary character sequences and trigger the application to process this input, leading to unresponsiveness or abnormal termination. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Liquid Studio version 2.17 **Description** The software contains a denial of service issue that allows local attackers to disrupt the application. Attackers can trigger this by providing crafted input via the keyboard interface. Specifically, entering arbitrary characters during application runtime can cause the application to become unresponsive or terminate. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.