SECUNIA ADVISORY ID:
SA38282

VERIFY ADVISORY:
http://secunia.com/advisories/38282/

DESCRIPTION:
Multiple vulnerabilities have been reported in the JBDiary component
for Joomla, which can be exploited by malicious people to conduct SQL
injection attacks.

Input passed via the "newyear" or "newmonth" parameter to index.php
(when "option" is set to "com_jbdiary") is not properly sanitised
before being used in a SQL query. This can be exploited to manipulate
SQL queries by injecting arbitrary SQL code.

The vulnerabilities are reported in version 1.6. Other versions may
also be affected.

SOLUTION:
Edit the source code to ensure that input is properly sanitised.

PROVIDED AND/OR DISCOVERED BY:
B-HUNT3|2

SECUNIA ADVISORY ID:
SA38267

VERIFY ADVISORY:
http://secunia.com/advisories/38267/

DESCRIPTION:
A vulnerability has been discovered in JBPublishdownFP component for
Joomla, which can be exploited by malicious users to conduct SQL
injection attacks.

Input passed via the "cid[]" parameter to index.php (when "option" is
set to "com_jbpublishdownfp" and "task" is set to "edit") is not
properly sanitised before being used in a SQL query. This can be
exploited to manipulate SQL queries by injecting arbitrary SQL code.

Successful exploitation requires "Public Back-end" user group
privileges.

The vulnerability is confirmed in version 1.4. Other versions may
also be affected.

SOLUTION:
Edit the source code to ensure that input is properly sanitised.

PROVIDED AND/OR DISCOVERED BY:
B-HUNT3|2

SECUNIA ADVISORY ID:
SA38263

VERIFY ADVISORY:
http://secunia.com/advisories/38263/

DESCRIPTION:
Multiple vulnerabilities have been discovered in the ContentBlogList
component for Joomla, which can be exploited by malicious people to
conduct SQL injection attacks.

Input passed via the "sectionid", "catid", or "searchword" parameter
to index.php (when "option" is set to "com_contentbloglist" and
"view" is set to "listsearch") is not properly sanitised before being
used in a SQL query. This can be exploited to manipulate SQL queries
by injecting arbitrary SQL code.

The vulnerabilities are confirmed in version 1.6. Other versions may
also be affected.

SOLUTION:
Edit the source code to ensure that input is properly sanitised.

PROVIDED AND/OR DISCOVERED BY:
B-HUNT3|2

ORIGINAL ADVISORY:
http://www.exploit-db.com/exploits/11236

SECUNIA ADVISORY ID:
SA38024

VERIFY ADVISORY:
http://secunia.com/advisories/38024/

DESCRIPTION:
A vulnerability has been reported in the Document Seller for Docman
component for Joomla, which can be exploited by malicious people to
conduct SQL injection attacks.

Input passed via the "id" parameter to index.php (when "option" is
set to "com_dm_orders", "task" is set to "order_form", and
"payment_method" is set to "Paypal") is not properly sanitised before
being used in SQL queries. This can be exploited to manipulate SQL
queries by injecting arbitrary SQL code.

The vulnerability is reported in version 2.1. Other versions may also
be affected.

SOLUTION:
Edit the source code to ensure that input is properly sanitised.

PROVIDED AND/OR DISCOVERED BY:
NoGe

SECUNIA ADVISORY ID:
SA38161

VERIFY ADVISORY:
http://secunia.com/advisories/38161/

DESCRIPTION:
MustLive has discovered a vulnerability in the JVClouds3D module for
Joomla!, which can be exploited by malicious people to conduct
cross-site scripting attacks.

Input passed via the "tagcloud" parameter to tagcloud.swf (when
"mode" is set to "tags") is not properly sanitised before being
returned to the user. This can be exploited to execute arbitrary HTML
and script code in a user's browser session in context of an affected
site.

The vulnerability is confirmed in version 1.0.9b. Other versions may
also be affected.

SOLUTION:
Filter malicious characters and character sequences using a proxy.

PROVIDED AND/OR DISCOVERED BY:
MustLive

ORIGINAL ADVISORY:
http://websecurity.com.ua/3839/

SECUNIA ADVISORY ID:
SA38112

VERIFY ADVISORY:
http://secunia.com/advisories/38112/

DESCRIPTION:
A vulnerability has been discovered in the jEmbed-Embed Anything
component for Joomla, which can be exploited by malicious people to
conduct SQL injection attacks.

Input passed via the "catid" parameter to index.php (when "option" is
set to "com_jembed" and "task" is set to "summary") is not properly
sanitised before being used in SQL queries. This can be exploited to
manipulate SQL queries by injecting arbitrary SQL code.

SOLUTION:
Edit the source code to ensure that input is properly sanitised.

PROVIDED AND/OR DISCOVERED BY:
FL0RiX