PT-2020-14592 · Open Source Matters · Joomla!

Name of the Vulnerable Software and Affected Versions: Joomla! versions 3.9.19 and earlier Description: An issue was discovered where internal read-only fields in the User table class could be modified by users. Recommendations: For Joomla! versions 3.9.19 and earlier, update to a version that...

Joomla! J2 JOBS 1.3.0 - 'sortby' Authenticated SQL Injection

Exploit Title: Joomla! J2 JOBS 1.3.0 - 'sortby' Authenticated SQL Injection Date: 2020-06-17 Exploit Author: Mehmet Kelepçe / Gais Cyber Security Vendor Homepage: https://joomsky.com/ Software Link: https://joomsky.com/products/js-jobs-pro.html Change Log Update :...

PT-2020-14591 · Open Source Matters · Joomla!

Name of the Vulnerable Software and Affected Versions: Joomla! versions prior to 3.9.20 Description: An issue was discovered in Joomla! where lack of input filtering and escaping allows XSS attacks in mod random image. Recommendations: For versions prior to 3.9.20, update to version 3.9.20 or lat...

SQL injection vulnerability in the ph***_co*** parameter of the JEGallery component of Joomla!

Developed with PHP language and MySQL database, Joomla! is a content management system. A SQL injection vulnerability exists in the phco parameter of the Joomla! JEGallery component, which can be exploited by an attacker to obtain sensitive information from the database...

SQL injection vulnerability in the ci*** parameter of the JEGallery component of Joomla!

Developed with PHP language and MySQL database, Joomla! is a content management system. A SQL injection vulnerability exists in the ci parameter of the Joomla! JEGallery component, which can be exploited by attackers to obtain sensitive information from the database...

Joomla J2 Jobs SQL Injection

An SQL injection vulnerability exists in Joomla J2 Jobs. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...

Joomla! J2 JOBS 1.3.0 - 'sortby' Authenticated SQL Injection

Exploit Title: Joomla! J2 JOBS 1.3.0 - 'sortby' Authenticated SQL Injection Date: 2020-06-17 Exploit Author: Mehmet Kelepçe / Gais Cyber Security Vendor Homepage: https://joomsky.com/ Software Link: https://joomsky.com/products/js-jobs-pro.html Change Log Update :...

Joomla Saxum Astro Component SQL Injection (CVE-2018-7180)

A vulnerability exists in Saxum2003 astro 4.0.14. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Joomla J2 JOBS 1.3.0 - SQL Injection

Joomla J2 JOBS version 1.3.0 suffers from a remote SQL injection vulnerability. Exploit Title: Joomla J2 JOBS - Authenticated SQL Injection Date: 17.06.2020 Exploit Author: Mehmet Kelepçe / Gais Cyber Security Vendor Homepage: https://joomsky.com/ Software Link:...

Joomla! J2 JOBS SQL Injection Vulnerability

Joomla! is an open source, cross-platform content management system CMS developed using PHP and MySQL. A SQL injection vulnerability exists in Joomla! J2 JOBS. The vulnerability stems from a database application that lacks validation of externally entered SQL statements. An attacker can exploit t...

Joomla Component com_hdwplayer SQL Injection

SQL Injection vulnerability in Joomla HDWPlayer component hdwplayersearch parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

Joomla J2 JOBS 1.3.0 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla J2 JOBS - Authenticated SQL Injection Exploit Author: Mehmet Kelepçe / Gais Cyber Security Vendor Homepage: https://joomsky.com/ Software Link: https://joomsky.com/products/js-jobs-pro.html Version: 1.3.0 Tested on: Kali...

Joomla J2 JOBS 1.3.0 SQL Injection

Exploit Title: Joomla J2 JOBS - Authenticated SQL Injection Date: 17.06.2020 Exploit Author: Mehmet Kelepçe / Gais Cyber Security Vendor Homepage: https://joomsky.com/ Software Link: https://joomsky.com/products/js-jobs-pro.html Version: 1.3.0 Tested on: Kali Linux - Apache2 Vulnerable param:...

Joomla Ek Rishta SQL Injection (CVE-2018-7315)

An SQL injection vulnerability exists in Joomla Ek Rishta component. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...

Joomla! 2.5.x < 3.9.17 Multiple Vulnerabilities

According to its self-reported version, the instance of Joomla! running on the remote web server is 2.5.x prior to 3.9.17. It is, therefore, affected by multiple vulnerabilities : - Incorrect ACL checks in the access level section of comusers allow the unauthorized deletion of usergroups...

Joomla! 2.5.x < 3.9.19 Multiple Vulnerabilities

According to its self-reported version, the instance of Joomla! running on the remote web server is 2.5.x prior to 3.9.19. It is, therefore, affected by multiple vulnerabilities : - Lack of input validation in the heading tag option of the "Articles - Newsflash" and "Articles - Categories" module...

Joomla! 1.7.x < 3.9.16 Multiple Vulnerabilities

According to its self-reported version, the instance of Joomla! running on the remote web server is 1.7.x prior to 3.9.16. It is, therefore, affected by multiple vulnerabilities : - Missing token checks in the image actions of comtemplates causes CSRF vulnerabilities. CVE-2020-10241 - Inadequate...

Joomla J2Store SQL Injection

An SQL injection vulnerability exists in Joomla J2Store. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...

Joomla 2.5.x < 3.9.19 Multiple Vulnerabilities (5812-joomla-3-9-19)

According to its self-reported version, the instance of Joomla! running on the remote web server is 2.5.x prior to 3.9.19. It is, therefore, affected by multiple vulnerabilities. - In Joomla! before 3.9.19, lack of input validation in the heading tag option of the Articles - Newsflash and Article...

J2Store plugin SQL Injection Vulnerability

Joomla! is the U.S. Open Source Matters team using PHP and MySQL development of a set of open source , cross-platform content management system CMS. J2Store plugin is used in one of the e-commerce plug-ins . A SQL injection vulnerability exists in Joomla! J2Store plugin versions prior to 3.3.13...