19238 matches found
Joomla! vulnerability is being actively exploited
The Cybersecurity and Infrastructure Security Agency CISA has added a vulnerability for the Joomla! Content Management System CMS to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. This means that Federal Civilian Executive Branch FCEB agencies need to...
Exploit for SQL Injection in Stackideas Easydiscuss
CVE-2023-51810 Description Blind SQL injection vulnerabil...
[20240203] - Core - XSS in media selection fields
Inadequate input validation for media selection fields lead to XSS vulnerabilities in various extensions...
PT-2024-1842 · Joomla · Joomla!
Name of the Vulnerable Software and Affected Versions: Joomla! affected versions not specified Description: The issue is related to inadequate protection of the web page structure, allowing a remote attacker to conduct a cross-site scripting XSS attack. Inadequate input validation for media...
CISA Adds Six Known Exploited Vulnerabilities to Catalog
CISA has added six new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2023-38203 Adobe ColdFusion Deserialization of Untrusted Data Vulnerability CVE-2023-29300 Adobe ColdFusion Deserialization of Untrusted Data Vulnerability...
Joomla! Improper Access Control Vulnerability
Joomla! contains an improper access control vulnerability that allows unauthorized access to webservice endpoints...
Exploit for Improper Access Control in Joomla Joomla\!
CVE-2023-23752 Description This repository contains Pytho...
Joomla! 5.x < 5.0.1 Information Disclosure
According to its self-reported version, the instance of Joomla! running on the remote web server is 1.6.x prior to 4.4.1 or 5.x prior to 5.0.1. It is, therefore, affected by an information disclosure vulnerability. The language file parsing process could be manipulated to expose environment...
Joomla! 1.6.x < 4.4.1 Information Disclosure
According to its self-reported version, the instance of Joomla! running on the remote web server is 1.6.x prior to 4.4.1 or 5.x prior to 5.0.1. It is, therefore, affected by an information disclosure vulnerability. The language file parsing process could be manipulated to expose environment...
CVE-2023-49707
SQLi vulnerability in S5 Register module for Joomla...
CVE-2023-49708
SQLi vulnerability in Starshop component for Joomla...
CVE-2023-49707
SQLi vulnerability in S5 Register module for Joomla...
CVE-2023-49708
SQLi vulnerability in Starshop component for Joomla...
CVE-2023-40627
A reflected XSS vulnerability was discovered in the LivingWord component for Joomla...
CVE-2023-40628
A reflected XSS vulnerability was discovered in the Extplorer component for Joomla...
CVE-2023-40655
A reflected XSS vulnerability was discovered in the Proforms Basic component for Joomla...
CVE-2023-40629
SQLi vulnerability in LMS Lite component for Joomla...
CVE-2023-40656
A reflected XSS vulnerability was discovered in the Quickform component for Joomla...