Arbitrary file deletion vulnerability in the joomla! All*** Vid*** Sha*** component

joomla! is an open source content management system CMS. An arbitrary file deletion vulnerability exists in the joomla! All Vid Sha component. An attacker can exploit the vulnerability to delete arbitrary files...

SQL Injection Vulnerability in joomla! Boo*** Component Sho*** Functionality

joomla! is an open source content management system CMS. A SQL injection vulnerability exists in the joomla! Boo component's sho function. The vulnerability allows attackers to obtain sensitive information about the database...

SQL injection vulnerability in X-forwarded-for header of joomla! jdo*** component

joomla! is an open source content management system CMS. A SQL injection vulnerability exists in the X-forwarded-for header of the joomla! jdo component. The vulnerability allows attackers to obtain sensitive information about the database...

Joomla Component XMap Database Leakage Vulnerability

Joomla is an open source content management system CMS. A database disclosure vulnerability exists in the Joomla component XMap. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in Joomla All Video Share Component

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the Joomla All Video Share component. The vulnerability allows attackers to obtain sensitive database information...

Joomla Component XMap SQL Injection Vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the Joomla component XMap. The flaw is due to input passed to 'index.php' via the 'view=' and 'itemID=' parameters failing to be properly filtered before being used in SQL queries. An attacker could...

Joomla! cross-site scripting vulnerability (CNVD-2019-15987)

Joomla! is the U.S. Open Source Matters team of a set of PHP and MySQL development using open source , cross-platform content management system CMS. A cross-site scripting vulnerability exists in Joomla! versions prior to 3.9.4, which can be exploited by remote attackers to execute arbitrary scri...

Joomla! access control error vulnerability (CNVD-2019-15988)

Joomla! is the U.S. Open Source Matters team of a set of PHP and MySQL development using open source , cross-platform content management system CMS. An Access Control Error vulnerability exists in Joomla! versions prior to 3.9.4, which stems from a lack of ACL checking in the Sample Data plugin a...

Joomla! < 3.9.4 Multiple Vulnerabilities

Joomla! is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:joomla:joomla"; ifdescription...

Joomla! 3.0.x < 3.9.4 Multiple Vulnerabilities

According to its self-reported version number, the detected Joomla! application is affected by multiple vulnerabilities : - Lack of ACL checks in sample data plugins affects Joomla 3.8.0 through 3.9.3 - XSS in comconfig JSON handler affects Joomla 3.2.0 through 3.9.3 - XSS in itemtitle layout...

Joomla! cross-site scripting vulnerability (CNVD-2019-15989)

Joomla! is a globally recognized content management system developed using PHP language and MySQL database, which can be implemented on various platforms such as Linux, Windows, MacOSX and so on. A cross-site scripting vulnerability exists in the media form field in versions of Joomla! prior to...

Joomla! cross-site scripting vulnerability (CNVD-2019-15986)

Joomla! is the U.S. Open Source Matters team of a set of PHP and MySQL development using open source , cross-platform content management system CMS. A cross-site scripting vulnerability exists in Joomla! versions prior to 3.9.4, which stems from the program's failure to filter user-submitted inpu...

Joomla! 3.x < 3.9.4 Multiple Vulnerabilities

According to its self-reported version number, the Joomla! installation running on the remote web server is prior to 3.9.4. It is, therefore, affected by multiple vulnerabilities: - A logic error exists in sample data plugins that allows remote attackers to gain unauthorized access to unspecified...

Design/Logic Flaw

An issue was discovered in Joomla! before 3.9.4. The sample data plugins lack ACL checks, allowing unauthorized access...

CVE-2019-9712

An issue was discovered in Joomla! before 3.9.4. The JSON handler in comconfig lacks input validation, leading to XSS...

CVE-2019-9714

An issue was discovered in Joomla! before 3.9.4. The media form field lacks escaping, leading to XSS...

CVE-2019-9713

An issue was discovered in Joomla! before 3.9.4. The sample data plugins lack ACL checks, allowing unauthorized access...

CVE-2019-9712

An issue was discovered in Joomla! before 3.9.4. The JSON handler in comconfig lacks input validation, leading to XSS...

CVE-2019-9714

An issue was discovered in Joomla! before 3.9.4. The media form field lacks escaping, leading to XSS...

CVE-2019-9713

An issue was discovered in Joomla! before 3.9.4. The sample data plugins lack ACL checks, allowing unauthorized access...