CVE-2016-1000120 - SQLi and XSS in Huge IT catalog extension v1.0.4 for Joomla

HIGH

SQLi and XSS in Huge IT catalog extension v1.0.4 for Joomla

Published Oct 27, 2016

7.2

HIGH

CVSS 3.0

EPSS 2.10%

SQLi and XSS in Huge IT catalog extension v1.0.4 for Joomla

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

Link	Providers	Tags
http://extensions.joomla.org/extensions/extension/e-commerce/shopping-cart/catalog		x_refsource_MISCProduct
http://www.securityfocus.com/bid/92185		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
http://www.vapidlabs.com/advisory.php?v=167		x_refsource_MISCExploitVendor Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Oct 27, 2016

Updated Aug 6, 2024

Reserved Jul 20, 2016

Updated n/a

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a