167 matches found
CVE-2012-2901
CVE-2012-2901 describes a cross-site scripting (XSS) vulnerability in the Joomla Content Editor (JCE) component’s Profile List, affecting Joomla! installations using JCE prior to version 2.1. The flaw allows remote attackers to inject arbitrary scripts/HTML via the search parameter sent to admini...
CVE-2012-2902
CVE-2012-2902 : Unrestricted file upload in Joomla! Content Editor (JCE) for Joomla! before 2.1. The flaw is in editor/extensions/browser/file.php where, if chunking is enabled (>0), an attacker can upload a PHP file with a double extension (e.g., .jpg.pht) to execute arbitrary code. Affected:...
CVE-2012-2902: Undefined Security Weakness
Unrestricted file upload vulnerability in editor/extensions/browser/file.php in the Joomla Content Editor JCE component before 2.1 for Joomla!, when chunking is set to greater than zero, allows remote authors to execute arbitrary PHP code by uploading a PHP file with a double extension as...
CVE-2012-2901: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Profile List in the Joomla Content Editor JCE component before 2.1 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the search parameter to administrator/index.php...
PT-2012-4347
Name of the Vulnerable Software and Affected Versions Joomla Content Editor JCE component versions prior to 2.1 for Joomla! Description A cross-site scripting XSS issue exists in the Profile List of the Joomla Content Editor JCE component, allowing remote attackers to inject arbitrary web script ...
PT-2012-4348
Name of the Vulnerable Software and Affected Versions Joomla Content Editor JCE component versions prior to 2.1 Description The issue allows remote authors to execute arbitrary PHP code by uploading a PHP file with a double extension. This can be achieved when chunking is set to greater than zero...
Meditate Web Content Editor 'username_input' SQL-Injection vulnerability
Advisory: Meditate Web Content Editor 'usernameinput' SQL-Injection vulnerability Advisory ID: SSCHADV2011-039 Author: Stefan Schurtz Affected Software: Successfully tested on Meditate 1.2 Vendor URL: http://www.arlomedia.com/ Vendor Status: fixed ========================== Vulnerability...
Meditate Web Content Editor 1.2 SQL Injection
Advisory: Meditate Web Content Editor 'usernameinput' SQL-Injection vulnerability Advisory ID: SSCHADV2011-039 Author: Stefan Schurtz Affected Software: Successfully tested on Meditate 1.2 Vendor URL: http://www.arlomedia.com/ Vendor Status: fixed ========================== Vulnerability...
Meditate Web Content Editor username_input - SQL Injection
Meditate Web Content Editor usernameinput - SQL Injection Advisory: Meditate Web Content Editor 'usernameinput' SQL-Injection vulnerability Advisory ID: SSCHADV2011-039 Author: Stefan Schurtz Affected Software: Successfully tested on Meditate 1.2 Vendor URL: http://www.arlomedia.com/ Vendor Statu...
Meditate Web Content Editor (username_input) SQL Injection
Exploit for php platform in category web applications Advisory: Meditate Web Content Editor 'usernameinput' SQL-Injection vulnerability Author: Stefan Schurtz Affected Software: Successfully tested on Meditate 1.2 Vendor URL: http://www.arlomedia.com/ Vendor Status: fixed ========================...
Meditate Web Content Editor 'username_input' - SQL Injection
Advisory: Meditate Web Content Editor 'usernameinput' SQL-Injection vulnerability Advisory ID: SSCHADV2011-039 Author: Stefan Schurtz Affected Software: Successfully tested on Meditate 1.2 Vendor URL: http://www.arlomedia.com/ Vendor Status: fixed ========================== Vulnerability...
JCE Joomla Extension <=2.0.10 Multiple Vulnerabilities
Exploit for php platform in category web applications www.BugReport.ir AmnPardaz Security Research Team Title: JCE Joomla Extension =2.0.10 Multiple Vulnerabilities Vendor: www.joomlacontenteditor.net Exploit: Available Vulnerable Version: 2.0.10 Image Manager 1.5.7.13, Media Manager 1.5.6.3,...
joomlacontenteditor (com_jce) BLIND sql injection vulnerability
=================================================================== joomlacontenteditor comjce BLIND sql injection vulnerability =================================================================== Software: joomlacontenteditor comjce Vendor: www.joomlacontenteditor.net Vuln Type: BLind SQL...
XSS vulnerability in create/edit/copy page and blogpost actions
panelThe following create/edit page URL's are vulnerable: - /pages/createpage.action - /pages/docreatepage.action - /pages/editpage.action - /pages/doeditepage.action on parentPageString panel Example of a maliciously crafted path:...
CVE-2006-6419
jce.php in the JCE Admin Component in Ryan Demmer Joomla Content Editor JCE 1.1.0 beta 2 and earlier for Joomla! comjce allows remote attackers to include and possibly execute arbitrary local files via the 1 plugin or 2 file parameter. NOTE: The provenance of this information is unknown; the...
CVE-2006-6420
Multiple cross-site scripting XSS vulnerabilities in jce.php in the JCE Admin Component in Ryan Demmer Joomla Content Editor JCE 1.1.0 beta 2 and earlier for Joomla! comjce allow remote attackers to inject arbitrary web script or HTML via the 1 img, 2 title, 3 w, or 4 h parameter, different vecto...
CVE-2006-6420
Technical details about CVE-2006-6420 are not provided in the connected documents. The initial description covers XSS in Joomla JCE, but there are no added specifics (products, versions, vectors) in the supplied materials. Monitor for updates.
CVE-2006-6419
CVE-2006-6419 affects Joomla! JCE Admin Component (com_jce) 1.1.0 beta2 and earlier. The vulnerability is a local file include/remote code execution issue in jce.php, where the (1) plugin or (2) file parameter can be used to include arbitrary local files, potentially executing PHP code on the ser...
CVE-2006-6420: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in jce.php in the JCE Admin Component in Ryan Demmer Joomla Content Editor JCE 1.1.0 beta 2 and earlier for Joomla! comjce allow remote attackers to inject arbitrary web script or HTML via the 1 img, 2 title, 3 w, or 4 h parameter, different vecto...
CVE-2006-6419: Undefined Security Weakness
jce.php in the JCE Admin Component in Ryan Demmer Joomla Content Editor JCE 1.1.0 beta 2 and earlier for Joomla! comjce allows remote attackers to include and possibly execute arbitrary local files via the 1 plugin or 2 file parameter. NOTE: The provenance of this information is unknown; the...