cve/2016/CVE-2016-10114.md

CVE-2016-10114

Description

SQL injection vulnerability in the "aWeb Cart Watching System for Virtuemart" extension before 2.6.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via vectors involving categorysearch and smartSearch.

POC

Reference

• https://github.com/qemm/joomlasqli
• https://www.exploit-db.com/exploits/40973/

Github

No PoCs found on GitHub currently.