Advisories · Technology
beardev JoomSport – for Sports: Team & League, Football, Hockey & more.
Every CVE that names beardev JoomSport – for Sports: Team & League, Football, Hockey & more among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.5 Medium
JoomSport <= 5.7.14 - Authenticated (Contributor+) SQL Injection via 'pgroup' Shortcode Attribute
- beardev JoomSport – for Sports: Team & League, Football, Hockey & more
- SQL injection
- CVSS 6.5 Medium
JoomSport <= 5.7.11 - Authenticated (Contributor+) SQL Injection via 'team_id' Shortcode Attribute
- beardev JoomSport – for Sports: Team & League, Football, Hockey & more
- SQL injection
- CVSS 4.9 Medium
JoomSport <= 5.7.9 - Authenticated (Administrator+) SQL Injection via 'order' Parameter
- beardev JoomSport – for Sports: Team & League, Football, Hockey & more
- SQL injection
- CVSS 6.5 Medium
JoomSport <= 5.7.9 - Authenticated (Contributor+) SQL Injection via 'event' Shortcode Attribute
- beardev JoomSport – for Sports: Team & League, Football, Hockey & more
- SQL injection
- CVSS 4.3 Medium
JoomSport <= 5.7.8 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Group Creation/Modification via season_groupedit AJAX action
- beardev JoomSport – for Sports: Team & League, Football, Hockey & more
- Broken access control
- CVSS 4.3 Medium
JoomSport <= 5.7.8 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Group Deletion via season_groupdel AJAX action
- beardev JoomSport – for Sports: Team & League, Football, Hockey & more
- Broken access control
- CVSS 7.5 High
JoomSport <= 5.7.7 - Unauthenticated SQL Injection via 'sortf' Parameter
- beardev JoomSport – for Sports: Team & League, Football, Hockey & more
- SQL injection
- CVSS 9.8 CriticalCritical · CVSS 9+
JoomSport <= 5.7.3 - Unauthenticated Directory Traversal to Local File Inclusion
- beardev JoomSport – for Sports: Team & League, Football, Hockey & more
- File inclusion
- CVSS 7.1 High
JoomSport <= 5.6.17 - Reflected Cross-Site Scripting via page
- beardev JoomSport – for Sports: Team & League, Football, Hockey & more
- Cross-site scripting (XSS)
- CVSS 7.2 High
JoomSport – for Sports: Team & League, Football, Hockey & more <= 5.2.5 - Authenticated (Admin+) SQL Injection via orderby
- beardev JoomSport – for Sports: Team & League, Football, Hockey & more
- SQL injection
- CVSS 7.2 High
JoomSport – for Sports: Team & League, Football, Hockey & more <= 5.2.5 - Authentciated (Admin+) SQL Injection via orderby
- beardev JoomSport – for Sports: Team & League, Football, Hockey & more
- SQL injection