19611 matches found
CVE-2018-17855
CVE-2018-17855 affects Joomla! before 3.8.13. It describes an ACL/verification flaw in com_users: if an attacker gains access to a user’s mail account who can approve admin verifications during registration, they can activate themselves. The vulnerability is documented across multiple sources (NV...
CVE-2018-17858
Joomla! prior to 3.8.13 is affected by a CSRF vulnerability in the backend of com_installer actions due to insufficient CSRF hardening. The issue can lead to unauthorized operations (impacting confidentiality, integrity, and availability as noted in CVSS) and is mitigated by upgrading to Joomla! ...
CVE-2018-17858
An issue was discovered in Joomla! before 3.8.13. cominstaller actions do not have sufficient CSRF hardening in the backend...
CVE-2018-17859
An issue was discovered in Joomla! before 3.8.13. Inadequate checks in comcontact could allow mail submission in disabled forms...
CVE-2018-17856
An issue was discovered in Joomla! before 3.8.13. comjoomlaupdate allows the execution of arbitrary code. The default ACL config enabled the ability of Administrator-level users to access comjoomlaupdate and trigger code execution...
CVE-2018-17857
Summary: CVE-2018-17857 affects Joomla! before 3.8.13, where inadequate checks on the tags search fields can lead to an access level violation . The issue is associated with com_tags and is documented across multiple sources indicating the vulnerability type and affected version range (prior to 3...
Joomla! Jimtawl 2.2.7 SQL Injection
Exploit Title: Joomla! Component Jimtawl 2.2.7 - 'id' SQL Injection Exploit Author: Ihsan Sencan Dork: N/A Date: 2018-10-03 Vendor Homepage: https://janguo.de/ Software Link: https://extensions.joomla.org/extensions/extension/vertical-markets/thematic-directory/collection-factory/ Software...
Joomla! Component Jimtawl 2.2.7 - 'id' SQL Injection
Exploit Title: Joomla! Component Jimtawl 2.2.7 - 'id' SQL Injection Exploit Author: Ihsan Sencan Dork: N/A Date: 2018-10-03 Vendor Homepage: https://janguo.de/ Software Link: https://extensions.joomla.org/extensions/extension/vertical-markets/thematic-directory/collection-factory/ Software...
Joomla! Component Jimtawl 2.2.7 - id SQL Injection
Joomla! Component Jimtawl 2.2.7 - id SQL Injection Exploit Title: Joomla! Component Jimtawl 2.2.7 - 'id' SQL Injection Exploit Author: Ihsan Sencan Dork: N/A Date: 2018-10-03 Vendor Homepage: https://janguo.de/ Software Link:...
Joomla Component JCK Editor 6.4.4 SQL Injection
SQL Injection vulnerability in Joomla Component JCK Editor links.php parent parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...
Joomla Jimtawl 2.2.7 Component - id SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Joomla! Component Jimtawl 2.2.7 - 'id' SQL Injection Exploit Author: Ihsan Sencan Vendor Homepage: https://janguo.de/ Software Link:...
CVE-2018-17394
SQL Injection exists in the Timetable Schedule 3.6.8 component for Joomla! via the eid parameter...
CVE-2018-17385
SQL Injection exists in the Social Factory 3.8.3 component for Joomla! via the radiuslat, radiuslng, or radiusradius parameter...
CVE-2018-17397
SQL Injection exists in the AlphaIndex Dictionaries 1.0 component for Joomla! via the letter parameter...
CVE-2018-17394
SQL Injection exists in the Timetable Schedule 3.6.8 component for Joomla! via the eid parameter...
CVE-2018-17385
SQL Injection exists in the Social Factory 3.8.3 component for Joomla! via the radiuslat, radiuslng, or radiusradius parameter...
CVE-2018-17397
SQL Injection exists in the AlphaIndex Dictionaries 1.0 component for Joomla! via the letter parameter...
CVE-2018-17379
SQL Injection exists in the Raffle Factory 3.5.2 component for Joomla! via the filterorderDir or filterorder parameter...