SECUNIA ADVISORY ID:
SA38378

VERIFY ADVISORY:
http://secunia.com/advisories/38378/

DESCRIPTION:
A vulnerability has been discovered in the ccNewsletter component for
Joomla, which can be exploited by malicious people to disclose
potentially sensitive information.

Input passed to the "controller" parameter in index.php (when
"option" is set to "com_ccnewsletter") is not properly sanitised
before being used to include files. This can be exploited to include
arbitrary files from local resources via directory traversal attacks
and URL-encoded NULL bytes.

The vulnerability is confirmed in version 1.0.5. Other versions may
also be affected.

SOLUTION:
Edit the source code to ensure that input is properly sanitised.

PROVIDED AND/OR DISCOVERED BY:
B-HUNT3|2 and AtT4CKxT3rR0r1ST

ORIGINAL ADVISORY:
B-HUNT3|2:
http://www.exploit-db.com/exploits/11277

AtT4CKxT3rR0r1ST:
http://www.exploit-db.com/exploits/11282

SECUNIA ADVISORY ID:
SA38282

VERIFY ADVISORY:
http://secunia.com/advisories/38282/

DESCRIPTION:
Multiple vulnerabilities have been reported in the JBDiary component
for Joomla, which can be exploited by malicious people to conduct SQL
injection attacks.

Input passed via the "newyear" or "newmonth" parameter to index.php
(when "option" is set to "com_jbdiary") is not properly sanitised
before being used in a SQL query. This can be exploited to manipulate
SQL queries by injecting arbitrary SQL code.

The vulnerabilities are reported in version 1.6. Other versions may
also be affected.

SOLUTION:
Edit the source code to ensure that input is properly sanitised.

PROVIDED AND/OR DISCOVERED BY:
B-HUNT3|2

SECUNIA ADVISORY ID:
SA38267

VERIFY ADVISORY:
http://secunia.com/advisories/38267/

DESCRIPTION:
A vulnerability has been discovered in JBPublishdownFP component for
Joomla, which can be exploited by malicious users to conduct SQL
injection attacks.

Input passed via the "cid[]" parameter to index.php (when "option" is
set to "com_jbpublishdownfp" and "task" is set to "edit") is not
properly sanitised before being used in a SQL query. This can be
exploited to manipulate SQL queries by injecting arbitrary SQL code.

Successful exploitation requires "Public Back-end" user group
privileges.

The vulnerability is confirmed in version 1.4. Other versions may
also be affected.

SOLUTION:
Edit the source code to ensure that input is properly sanitised.

PROVIDED AND/OR DISCOVERED BY:
B-HUNT3|2

SECUNIA ADVISORY ID:
SA38263

VERIFY ADVISORY:
http://secunia.com/advisories/38263/

DESCRIPTION:
Multiple vulnerabilities have been discovered in the ContentBlogList
component for Joomla, which can be exploited by malicious people to
conduct SQL injection attacks.

Input passed via the "sectionid", "catid", or "searchword" parameter
to index.php (when "option" is set to "com_contentbloglist" and
"view" is set to "listsearch") is not properly sanitised before being
used in a SQL query. This can be exploited to manipulate SQL queries
by injecting arbitrary SQL code.

The vulnerabilities are confirmed in version 1.6. Other versions may
also be affected.

SOLUTION:
Edit the source code to ensure that input is properly sanitised.

PROVIDED AND/OR DISCOVERED BY:
B-HUNT3|2

ORIGINAL ADVISORY:
http://www.exploit-db.com/exploits/11236

SECUNIA ADVISORY ID:
SA38024

VERIFY ADVISORY:
http://secunia.com/advisories/38024/

DESCRIPTION:
A vulnerability has been reported in the Document Seller for Docman
component for Joomla, which can be exploited by malicious people to
conduct SQL injection attacks.

Input passed via the "id" parameter to index.php (when "option" is
set to "com_dm_orders", "task" is set to "order_form", and
"payment_method" is set to "Paypal") is not properly sanitised before
being used in SQL queries. This can be exploited to manipulate SQL
queries by injecting arbitrary SQL code.

The vulnerability is reported in version 2.1. Other versions may also
be affected.

SOLUTION:
Edit the source code to ensure that input is properly sanitised.

PROVIDED AND/OR DISCOVERED BY:
NoGe

SECUNIA ADVISORY ID:
SA38161

VERIFY ADVISORY:
http://secunia.com/advisories/38161/

DESCRIPTION:
MustLive has discovered a vulnerability in the JVClouds3D module for
Joomla!, which can be exploited by malicious people to conduct
cross-site scripting attacks.

Input passed via the "tagcloud" parameter to tagcloud.swf (when
"mode" is set to "tags") is not properly sanitised before being
returned to the user. This can be exploited to execute arbitrary HTML
and script code in a user's browser session in context of an affected
site.

The vulnerability is confirmed in version 1.0.9b. Other versions may
also be affected.

SOLUTION:
Filter malicious characters and character sequences using a proxy.

PROVIDED AND/OR DISCOVERED BY:
MustLive

ORIGINAL ADVISORY:
http://websecurity.com.ua/3839/