19343 matches found
Joomla! J2 Store SQL Injection Vulnerability
Joomla! is an open source, cross-platform content management system CMS developed using PHP and MySQL. A SQL injection vulnerability exists in Joomla! J2 Store. An attacker can exploit the vulnerability to execute malicious SQL commands...
Joomla! J2 Store 3.3.11 - 'filter_order_Dir' Authenticated SQL Injection
Exploit Title: Joomla J2 Store 3.3.11 - 'filterorderDir' SQL Injection Authenticated Date: 2020-04-17 Exploit Author: Mehmet Kelepçe / Gais Cyber Security Vendor Homepage: https://www.j2store.org/ Software Link: https://www.j2store.org/download.html Reference:...
CVE-2020-13996
The J2Store plugin before 3.3.13 for Joomla! allows a SQL injection attack by a trusted store manager...
CVE-2020-13996
The J2Store plugin before 3.3.13 for Joomla! allows a SQL injection attack by a trusted store manager...
Sql injection
The J2Store plugin before 3.3.13 for Joomla! allows a SQL injection attack by a trusted store manager...
CVE-2020-13996
The J2Store plugin before 3.3.13 for Joomla! allows a SQL injection attack by a trusted store manager...
CVE-2020-13996
The CVE concerns the J2Store Joomla! plugin prior to version 3.3.13. A SQL injection vulnerability exists in J2Store’s database handling due to lack of validation of externally supplied SQL statements, exploitable by a trusted store manager. Affected component: J2Store plugin (Joomla!) before 3.3...
Joomla J2 Store 3.3.11 SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Joomla J2 Store v3.3.11 - Authenticated SQL Injection Exploit Author: Mehmet Kelepçe / Gais Cyber Security Vendor Homepage: https://www.j2store.org/ Software Link: https://www.j2store.org/download.html Reference:...
Joomla J2 Store 3.3.11 SQL Injection
Exploit Title: Joomla J2 Store v3.3.11 - Authenticated SQL Injection Date: 17.04.2020 Exploit Author: Mehmet Kelepçe / Gais Cyber Security Vendor Homepage: https://www.j2store.org/ Software Link: https://www.j2store.org/download.html Reference:...
Joomla! 3.0.0 - 3.9.18 Multiple XSS Vulnerabilities
Joomla! is prone to multiple cross-site scripting vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:joomla:joomla"...
Joomla! 3.7.0 - 3.9.18 CSRF Vulnerability
Joomla! is prone to a cross-site request forgery CSRF vulnerability because of missing token checks in compostinstall. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Joomla! 2.5.0 - 3.9.18 Textfilter Vulnerability
Joomla! is prone to an inconsistent default textfilter settings vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Joomla Resources Directory Users Exposed in Leaky AWS Bucket
An Amazon Web Services AWS cloud storage bucket that was left open to the public internet has exposed thousands of Joomla users’ personal information. About 2,700 individuals who signed up to use the Joomla Resources Directory JRD – a community forum for finding developers and service providers...
Joomla! Articles - Newsflash and Articles - Categories Modules Cross-Site Scripting Vulnerabilities
Joomla! is a U.S. Open Source Matters team using PHP and MySQL development of a set of open source, cross-platform content management system CMS.Articles - Newsflash is one of the Flash content extension module.Articles - Categories is one of the article classification module. A cross-site...
Joomla! cross-site request forgery vulnerability (CNVD-2020-41803)
Joomla! is the U.S. Open Source Matters team of a set of PHP and MySQL development using open source , cross-platform content management system CMS. A security vulnerability exists in Joomla! versions prior to 3.9.19, which stems from a missing token check in compostinstall. The vulnerability can...
Joomla! cross-site scripting vulnerability (CNVD-2020-53799)
Joomla! is the U.S. Open Source Matters team of a set of PHP and MySQL development using open source , cross-platform content management system CMS. A cross-site scripting vulnerability exists in the tagging option of commodules in versions of Joomla! prior to 3.9.19. The vulnerability stems from...
Joomla! cross-site scripting vulnerability (CNVD-2020-53800)
Joomla! is the U.S. Open Source Matters team of a set of PHP and MySQL development using open source , cross-platform content management system CMS. A cross-site scripting vulnerability exists in versions of Joomla! prior to 3.9.19, which stems from a default setting in the global text filter...
CVE-2020-13761
In Joomla! before 3.9.19, lack of input validation in the heading tag option of the "Articles - Newsflash" and "Articles - Categories" modules allows XSS...