Joomla! 2.5.0 - 3.9.13 SQLi Vulnerability

Joomla! is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:joomla:joomla";...

Joomla! 3.8.0 - 3.9.13 Path Disclosure Vulnerability

Joomla! is prone to a path disclosure vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:joomla:joomla"; ifdescriptio...

CVE-2019-17527

dataForDepandantField in models/custormfields.php in the JS JOBS FREE extension before 1.2.7 for Joomla! allows SQL Injection via the index.php?option=comjsjobs&task=customfields.getfieldtitlebyfieldandfieldfo child parameter...

CVE-2019-17527

dataForDepandantField in models/custormfields.php in the JS JOBS FREE extension before 1.2.7 for Joomla! allows SQL Injection via the index.php?option=comjsjobs&task=customfields.getfieldtitlebyfieldandfieldfo child parameter...

Sql injection

dataForDepandantField in models/custormfields.php in the JS JOBS FREE extension before 1.2.7 for Joomla! allows SQL Injection via the index.php?option=comjsjobs&task=customfields.getfieldtitlebyfieldandfieldfo child parameter...

CVE-2019-17527

dataForDepandantField in models/custormfields.php in the JS JOBS FREE extension before 1.2.7 for Joomla! allows SQL Injection via the index.php?option=comjsjobs&task=customfields.getfieldtitlebyfieldandfieldfo child parameter...

CVE-2019-17527

The CVE concerns the JS JOBS FREE Joomla! extension. Before version 1.2.7, the extension’s models/custormfields.php contains the dataForDepandantField function, which allows SQL Injection via the index.php?option=com_jsjobs&task=customfields.getfieldtitlebyfieldandfieldfo child parameter. Multipl...

JS JOBS FREE extension SQL Injection Vulnerability

Joomla! is a U.S. Open Source Matters team using PHP and MySQL development of a set of open source, cross-platform content management system CMS. JS JOBS FREE extension is used in which an online recruitment plug-ins. JS JOBS FREE extension 1.2.7 before version for Joomla! in the...

statics-server path traversal vulnerability

statics-server is a server for collecting information about Joomla installation environment. A path traversal vulnerability exists in statics-server. The vulnerability stems from a failure of a networked system or product to properly filter special elements in the path of a resource or file. An...

CVE-2019-19846

In Joomla! before 3.9.14, the lack of validation of configuration parameters used in SQL queries caused various SQL injection vectors...

CVE-2019-19845

In Joomla! before 3.9.14, a missing access check in framework files could lead to a path disclosure...

CVE-2019-19846

In Joomla! before 3.9.14, the lack of validation of configuration parameters used in SQL queries caused various SQL injection vectors...

CVE-2019-19845

In Joomla! before 3.9.14, a missing access check in framework files could lead to a path disclosure...

Sql injection

In Joomla! before 3.9.14, the lack of validation of configuration parameters used in SQL queries caused various SQL injection vectors...

Path traversal

In Joomla! before 3.9.14, a missing access check in framework files could lead to a path disclosure...

CVE-2019-19846

In Joomla! before 3.9.14, the lack of validation of configuration parameters used in SQL queries caused various SQL injection vectors...

CVE-2019-19846

CVE-2019-19846 affects Joomla! core prior to 3.9.14 (and 2.5.x to 3.9.13 per Nessus entry). The vulnerability stems from lack of validation of configuration parameters used in SQL queries, enabling SQL injection via multiple vectors. Impact per sources: high/severe potential data exposure/modific...

CVE-2019-19845

In Joomla! before 3.9.14, a missing access check in framework files could lead to a path disclosure...

CVE-2019-19845

CVE-2019-19845 affects Joomla! prior to 3.9.14. The root cause is a missing access check in framework files, which can lead to a path disclosure. This vulnerability is documented across multiple sources (e.g., Red Hat, Nessus/Nessus plugin 98936, CVE databases) and is specifically tied to Joomla!...

Joomla! SQL Injection Vulnerability (CNVD-2020-12711)

Joomla! is the U.S. Open Source Matters team of a set of PHP and MySQL development using open source , cross-platform content management system CMS. A SQL injection vulnerability exists in Joomla! versions prior to 3.9.14, which stems from a lack of validation of externally-entered SQL statements...