PT-2019-19935 · Joomla · Harmis Je Messenger

Name of the Vulnerable Software and Affected Versions: Harmis JE Messenger component version 1.2.2 Description: An issue was discovered in the Harmis JE Messenger component for Joomla!. It is possible to craft messages in a way that JavaScript gets executed on the side of the receiving user when...

PT-2019-19938 · Joomla · Harmis Je Messenger

Name of the Vulnerable Software and Affected Versions: Harmis JE Messenger component version 1.2.2 for Joomla! Description: An issue allows Directory Traversal, which enables read access to arbitrary files. Recommendations: For Harmis JE Messenger component version 1.2.2, update to a version that...

PT-2019-19937 · Joomla · Harmis Je Messenger

Name of the Vulnerable Software and Affected Versions: Harmis JE Messenger component version 1.2.2 Description: An issue in the Harmis JE Messenger component for Joomla allows reading information that should only be accessible by a different user. Recommendations: For version 1.2.2, update to a...

Joomla Component MorfeoShow SQL Injection Vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the Joomla component MorfeoShow. The vulnerability exists because the program fails to adequately filter user-supplied data before using it in SQL queries. Allowing remote attackers to execute arbitrar...

Joomla Ari Image Slider CSRF Backdoor Access Vulnerability

Joomla is an open source content management system CMS. A CSRF backdoor access vulnerability exists in Joomla Ari Image Slider. An attacker can exploit the vulnerability to spoof a client to make an unintentional request to the web server, which may result in data exposure or unintended code...

Joomla Component Rokin RokGallery SQL Injection Vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the Joomla component Rokin RokGallery. An attacker can exploit the vulnerability to obtain sensitive database information...

Joomla ARI Image Slider 2.2.0 Cross Site Request Forgery / Shell Upload

Exploit Title : Joomla ARI Image Slider 2.2.0 CSRF Shell Upload Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 27/03/2019 Vendor Homepage : ari-soft.com Software Download Link : ari-soft.com/Joomla-Components/ARI-Image-Slider/Detailed-product-flyer.html Softwar...

[20190502] - Core - By-passing protection of Phar Stream Wrapper Interceptor

In Joomla 3.9.3, the vulnerability of insecure deserialization when executing Phar archives was addressed by removing the known attack vector in the Joomla core. In order to intercept file invocations like fileexists or stat on compromised Phar archives the base name has to be determined and...

SQL injection vulnerability in Jommla!Po*** component (CNVD-2019-12554)

Joomla! is an open source content management system CMS. A SQL injection vulnerability exists in the Jommla!Po component, which can be exploited by an attacker to obtain sensitive information from the database...

SQL Injection Vulnerability in Jommla!Po*** Component

Joomla! is an open source content management system CMS. A SQL injection vulnerability exists in the Jommla!Po component, which can be exploited by an attacker to obtain sensitive information from the database...

Jommla! St*** component my*** function suffers from SQL injection vulnerability

Joomla! is an open source content management system CMS. A SQL injection vulnerability exists in the my function of the Jommla!St component, which can be exploited by an attacker to obtain sensitive information from the database...

Arbitrary File Download Vulnerability in Joomla! Ye*** Vi*** Sh*** Component

Joomla! is an open source content management system CMS. An arbitrary file download vulnerability exists in the Joomla!Ye Vi Sh component, which stems from the program's failure to correctly process data passed by the user, and can be exploited by an attacker to download arbitrary files on the...

SQL Injection Vulnerability in Jommla! St*** Component ch*** Functions

Joomla! is an open source content management system CMS. A SQL injection vulnerability exists in the ch function of the Jommla!St component, which can be exploited by an attacker to obtain sensitive information from the database...

SQL Injection Vulnerability in Joomla! Ye*** Vi*** Sh*** Component

Joomla! is an open source content management system CMS. A SQL injection vulnerability exists in the Joomla!Ye Vi Sh component, which can be exploited by an attacker to obtain sensitive information from a database...

SQL Injection Vulnerability in Jommla! Re*** Component

Joomla! is an open source content management system CMS. A SQL injection vulnerability exists in the Jommla!Re component, which can be exploited by an attacker to obtain sensitive information from the database...

SQL injection vulnerability in joomla! Boo*** component len***_req***_bl*** function

joomla! is an open source content management system CMS. A SQL injection vulnerability exists in the lenreqbl function of the joomla! Boo component. The vulnerability allows attackers to obtain sensitive information about the database...

SQL Injection Vulnerability in the joomla! jdo*** component sen*** module

joomla! is an open source content management system CMS. A SQL injection vulnerability exists in the joomla! jdo component sen module. The vulnerability allows attackers to obtain sensitive information about the database...

SQL injection vulnerability in joomla! Boo*** component rev*** function

joomla! is an open source content management system CMS. A SQL injection vulnerability exists in the joomla! Boo component rev function. The vulnerability allows attackers to obtain sensitive information about the database...

SQL injection vulnerability in the cat*** function of the joomla! jdo*** component

joomla! is an open source content management system CMS. A SQL injection vulnerability exists in the cat function of the joomla! jdo component. The vulnerability allows attackers to obtain sensitive information about the database...

SQL Injection Vulnerability in the jdo*** Component jdo*** Module of joomla!

joomla! is an open source content management system CMS. A SQL injection vulnerability exists in the jdo module of the joomla! jdo component. The vulnerability allows attackers to obtain sensitive information about the database...