漏洞描述 【漏洞对象】Joomla! Component JEXTN Question And Answer 【涉及版本】 Component JEXTNQuestion And Answer 3.1.0 【漏洞描述】 Joomla! Component JEXTN Question And Answer3.1.0存在sql注入漏洞,可造成数据泄露,甚至服务器被入侵。
相关漏洞推荐 POC CVE-2024-37656: GnuBoard5 5.5.16 - Open Redirect Fortinet FortiWeb /api/v2.0/cmdb/system/admin%3f/../../../../../cgi-bin/fwbcgi 权限绕过漏洞(CVE-2025-64446) POC CVE-2021-4374: WordPress Automatic Plugin - Unauthenticated Options Change POC CVE-2025-51991: XWiki <= 17.3.0 - Server-Side Template Injection (SSTI) 美特CRM /common/jsp/upload3.jsp 文件上传漏洞 亿赛通电子文档安全管理系统 /CDGServer3/dwr/call/plaincall/JLockSeniorDao.findByLockName.dwr SQL 注入漏洞 School Fees Payment System /student.php SQL 注入漏洞(CVE-2025-6403) EzGED3 /data/showparaphdocs.php 目录遍历漏洞(CVE-2025-51539) Agent-Zero /download_work_dir_file 文件读取漏洞(CVE-2025-55523) MapTiler-Tileserver-php /tileserver.php/x/1/1/1 目录遍历漏洞(CVE-2025-44137) POC CVE-2023-39121: Emlog 2.1.9 - SQL Injection POC CVE-2024-53900: Mongoose < 8.8.3 - Remote Code Execution POC CVE-2025-31486: Vite server.fs.deny Bypass - Local File Inclusion