Code injection

An issue was discovered in Joomla! through 3.9.19. Internal read-only fields in the User table class could be modified by users...

Cross site request forgery (csrf)

An issue was discovered in Joomla! through 3.9.19. A missing token check in the ajaxinstall endpoint of cominstaller causes a CSRF vulnerability...

Design/Logic Flaw

An issue was discovered in Joomla! through 3.9.19. Missing validation checks on the usergroups table object can result in a broken site configuration...

CVE-2020-15700

An issue was discovered in Joomla! through 3.9.19. A missing token check in the ajaxinstall endpoint of cominstaller causes a CSRF vulnerability...

CVE-2020-15700

CVE-2020-15700 affects Joomla! up to 3.9.19: the ajax_install endpoint in com_installer lacks a token check, causing a CSRF vulnerability. Affected: Joomla! through 3.9.19. Impact: CSRF (network vector; user interaction required; confidentiality/integrity/availability LOW). Mitigation: upgrade to...

CVE-2020-15699

An issue was discovered in Joomla! through 3.9.19. Missing validation checks on the usergroups table object can result in a broken site configuration...

CVE-2020-15699

CVE-2020-15699 affects Joomla! up to version 3.9.19. The issue is missing validation checks on the usergroups table object, which can lead to a broken site configuration. Multiple connected sources (Red Hat, OSV, NVD, PT-Security, etc.) corroborate this description and reference Joomla! 3.9.20 as...

CVE-2020-15698

Summary: CVE-2020-15698 affects Joomla! up to version 3.9.19, where inadequate filtering on the system information screen can expose Redis or proxy credentials. The vulnerability is documented across multiple sources (NVD/Red Hat/OSV/NESSUS) with consistent description. What’s affected: Joomla! 3...

CVE-2020-15698

An issue was discovered in Joomla! through 3.9.19. Inadequate filtering on the system information screen could expose Redis or proxy credentials...

CVE-2020-15697

CVE-2020-15697 affects Joomla! up to version 3.9.19. The issue is that internal read-only fields in the User table class could be modified by users, enabling unauthorized modification of user data and impacting data integrity. The reliable sources in the connected documents corroborate this speci...

CVE-2020-15697

An issue was discovered in Joomla! through 3.9.19. Internal read-only fields in the User table class could be modified by users...

CVE-2020-15696

An issue was discovered in Joomla! through 3.9.19. Lack of input filtering and escaping allows XSS attacks in modrandomimage...

CVE-2020-15696

CVE-2020-15696 affects Joomla! up to 3.9.19, where lack of input filtering/escaping in the mod_random_image component allows Cross-Site Scripting (XSS). The vulnerability targets the link parameter handling, enabling attacker-controlled content to be executed in a victim’s browser. The issue is d...

CVE-2020-15695

CVE-2020-15695 affects Joomla! up to version 3.9.19. The issue is a missing token check in the remove request section of the com_privacy component, causing a CSRF vulnerability. The CVSS details indicate network access, no privileges required, user interaction required, and low impact across conf...

CVE-2020-15695

An issue was discovered in Joomla! through 3.9.19. A missing token check in the remove request section of comprivacy causes a CSRF vulnerability...

PT-2020-14590 · Open Source Matters · Joomla!

Name of the Vulnerable Software and Affected Versions: Joomla! versions 3.9.19 and earlier Description: A missing token check in the remove request section of com privacy causes a CSRF issue. Recommendations: For versions 3.9.19 and earlier, update to a version that includes the fix for the missi...

PT-2020-14594 · Open Source Matters · Joomla!

Name of the Vulnerable Software and Affected Versions: Joomla! versions prior to 3.9.20 Description: An issue was discovered in Joomla! where missing validation checks on the usergroups table object can result in a broken site configuration. Recommendations: For versions prior to 3.9.20, update t...

PT-2020-14593 · Joomla · Joomla!

Name of the Vulnerable Software and Affected Versions: Joomla! versions prior to 3.9.20 Description: An issue was discovered that could expose Redis or proxy credentials due to inadequate filtering on the system information screen. Recommendations: For versions prior to 3.9.20, update to version...

Joomla J2 JOBS 1.3.0 - (sortby) Authenticated SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! J2 JOBS 1.3.0 - 'sortby' Authenticated SQL Injection Exploit Author: Mehmet Kelepçe / Gais Cyber Security Vendor Homepage: https://joomsky.com/ Software Link: https://joomsky.com/products/js-jobs-pro.html Change Log Upda...

PT-2020-14595 · Open Source Matters · Joomla!

Name of the Vulnerable Software and Affected Versions: Joomla! versions prior to 3.9.20 Description: A missing token check in the "ajax install" endpoint of com installer causes a CSRF issue. Recommendations: For versions prior to 3.9.20, update to version 3.9.20 or later to resolve the issue...