Joomla SQL注入漏洞

Joomla! is a globally recognized content management system developed using the PHP language coupled with a MySQL database that can be implemented on various platforms such as Linux, Windows, MacOSX, and many others. A SQL injection vulnerability exists in the back-end user list of Joomla! 3.0.0 -...

PT-2020-17367 · Open Source Matters · Joomla!

Name of the Vulnerable Software and Affected Versions: Joomla! versions 2.5.0 through 3.9.22 Description: A missing token check in the emailexport feature of com privacy causes a CSRF issue. Recommendations: For Joomla! versions 2.5.0 through 3.9.22, update to a version that includes the fix for...

PT-2020-17366 · Joomla · Joomla!

Name of the Vulnerable Software and Affected Versions: Joomla! versions 3.9.0 through 3.9.22 Description: An issue was discovered that leads to a user enumeration attack vector in the backend login page due to improper handling of the username. Recommendations: For Joomla! versions 3.9.0 through...

PT-2020-17362 · Joomla · Joomla!

Name of the Vulnerable Software and Affected Versions: Joomla! versions 2.5.0 through 3.9.22 Description: An issue was discovered where the autosuggestion feature of com finder did not respect the access level of the corresponding terms. Recommendations: For Joomla! versions 2.5.0 through 3.9.22,...

Joomla! 安全漏洞

Joomla! is a globally recognized content management system developed using the PHP language coupled with a MySQL database that can be implemented on various platforms such as Linux, Windows, MacOSX, and many others. An information disclosure vulnerability exists in Joomla! 2.5.0 - 3.9.22. The...

Joomla! 路径遍历漏洞

Joomla! is a globally recognized content management system developed using the PHP language coupled with a MySQL database that can be implemented on various platforms such as Linux, Windows, MacOSX, and many others. A path traversal vulnerability exists in Joomla! 2.5.0 - 3.9.22. The vulnerabilit...

Joomla! 信息泄露漏洞

Joomla! is a globally recognized content management system developed using the PHP language coupled with a MySQL database that can be implemented on various platforms such as Linux, Windows, MacOSX, and many others. A user enumeration vulnerability exists in the back-end login page of Joomla!...

PT-2020-17365 · Joomla · Joomla!

Name of the Vulnerable Software and Affected Versions: Joomla! versions 3.0.0 through 3.9.22 Description: An issue was discovered that leads to a SQL injection vulnerability in the backend user list due to improper filter blacklist configuration. Recommendations: For Joomla! versions 3.0.0 throug...

PT-2020-17364 · Joomla · Joomla!

Name of the Vulnerable Software and Affected Versions: Joomla! versions 2.5.0 through 3.9.22 Description: An issue was discovered in the folder parameter of mod random image, which lacked input validation, leading to a path traversal vulnerability. Recommendations: For Joomla! versions 2.5.0...

PT-2020-17368 · Open Source Matters · Joomla!

Name of the Vulnerable Software and Affected Versions: Joomla! versions 1.7.0 through 3.9.22 Description: An issue was discovered in Joomla! due to a lack of input validation while handling ACL rulesets, which can cause write ACL violations. Recommendations: For versions 1.7.0 through 3.9.22,...

Joomla! Remote Code Execution (CVE-2020-10238; CVE-2020-10239; CVE-2021-23132)

A remote code execution vulnerability exists in Joomla!. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Joomla! Component GMapFP 3.5 - Unauthenticated Arbitrary File Upload

Exploit Title: Joomla! Component GMapFP 3.5 - Unauthenticated Arbitrary File Upload Google Dork: inurl:''comgmapfp'' Date: 2020-03-27 Exploit Author: ThelastVvV Vendor Homepage: https://gmapfp.org/ Version:Version J3.5 /J3.5free Tested on: Ubuntu CVE: CVE-2020-23972 Description: An attacker can...

Joomla 1.7.x < 3.9.23 Multiple Vulnerabilities (5828-joomla-3-9-23)

According to its self-reported version, the instance of Joomla! running on the remote web server is 1.7.x prior to 3.9.23. It is, therefore, affected by multiple vulnerabilities. - The autosuggestion feature of comfinder did not respect the access level of the corresponding terms. - The global...

Vulnerabilities fixed in Joomla!

Vulnerabilities have been fixed in Joomla! The vulnerabilities allow a malicious person to launch attacks that lead to the following categories of damage: Cross-Site Request Forgery XSRF. Security measure circumvention SQL Injection Accessing sensitive data Accessing system data Joomla! provides...

Joomla Publisher Component Persistent Cross-Site Scripting

A cross-site scripting vulnerability exists in Joomla Publisher Component. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

Joomla Plugin Simple Image Gallery Extended (SIGE) 3.5.3 - Multiple Vulnerabilities

Exploit Title: Joomla Plugin Simple Image Gallery Extended SIGE 3.5.3 - Multiple Vulnerabilities Exploit Author: Vulnerability-Lab Date: 2020-11-11 Vendor Homepage: https://kubik-rubik.de/sige-simple-image-gallery-extended Software Link: https://kubik-rubik.de/sige-simple-image-gallery-extended...

Joomla GMapFP Component Arbitrary File Upload (CVE-2020-23972)

An arbitrary file upload vulnerability exists in Joomla GMapFP Component. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

SIGE 3.4.1 / 3.5.3 Pro Cross Site Scripting / Remote File Inclusion

Document Title: =============== SIGE Joomla 3.4.1 & 3.5.3 Pro - Multiple Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2265 Release Date: ============= 2020-11-11 Vulnerability Laboratory ID VL-ID: ====================================...

Nugmubs ChronoForms Cross-Site Scripting Vulnerability

Nugmubs ChronoForms is a plugin from the individual developers of Nugmubs for providing discussion functionality to Joomla. A cross-site scripting vulnerability exists in Nugmubs ChronoForms version 2.0.11, which originates when inserting a crafted payload into a post. If any user sees the post,...

Joomla Remote Code Execution (CVE-2020-11890)

A remote code execution vulnerability exists in Joomla. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...