joomla-cve-2018-6396

Joomla-CVE-2018-6396 Компонент Joomla! Google Map Landkarten = 4.2.3 - SQL-инъекция Дата: 03/03/2018 Домашняя страница поставщика: http://www.joomla-24.de/ Ссылка на ПО: https://extensions.joomla.org/extensions/extension/maps-a-weather/maps-a-locations/google-map-landkarten/ Версия: = 4.2.3...

CVE-2026-57827

CVE-2026-57827 — RSFiles! Joomla Component Unauthenticated File Upload RCE Split-Controller Upload Bypass → Direct Write Task → /downloads/shell.php → RCE Overview CVE-2026-57827 is a critical-severity CVSS 9.8 unauthenticated arbitrary file upload vulnerability in RSFiles! comrsfiles, a widely...

CVE-2026-57827

CVE-2026-57827 — RSFiles! Joomla 컴포넌트 인증 없는 파일 업로드 RCE 분할 컨트롤러 업로드 우회 → 직접 쓰기 태스크 → /downloads/shell.php → RCE 개요 CVE-2026-57827 은 Joomla용으로 널리 사용되는 파일 관리 및 다운로드 컴포넌트인 RSFiles!comrsfiles 버전 1.17.12에서 발생하는 치명적 심각도CVSS 9.8의 인증 없는 임의 파일 업로드 취약점입니다. 이 취약점은 분할 컨트롤러 설계 결함을 악용합니다. RSFiles!는 업로드를 두 개의...

CVE-2026-66917

JoomGallery의 객체 수준 권한 부여 결함을 통한 IDOR + 저장형 XSS JoomGallery ≤ 4.3.0 — 편집자Editor 역할 사용자가 모든 갤러리 이미지를 탈취하고 XSS 페이로드를 저장하여 관리자 세션 탈취 가능 요약 JoomGallery의 UserimageController::save는 checkACL'edit.own', ... 대신 checkACL'edit', ...를 확인합니다. 편집자Editor 역할 사용자는 소유권과 관계없이 모든 이미지에 대해 task=userimage.save&id=N으로...

PageBuilderCK-CVE-2026-56290-Exploit

Page Builder CK — RCE-зонд fonts.save CVE-2026-56290 BlackHat Team — PoC-сканер для уязвимости Page Builder CK fonts.save в Joomla. POC CVE-2026-56290 Автор: @mrzblackhat Команда: BlackHat Team Благодарности: Peyman Siyahi · MR.PERSIA Обзор Этот инструмент проверяет сайты на Joomla, использующие...

CVE-2026-56290

CVE-2026-56290 - Compagebuilderck Массовый эксплойт ⚠️ Отказ от ответственности Этот инструмент предназначен только для образовательных целей и авторизованного тестирования безопасности. Несанкционированный доступ к компьютерным системам незаконен Используйте этот инструмент только на системах,...

Exploit for Unrestricted Upload of File with Dangerous Type in Rsjoomla Rsfiles\!

CVE-2026-57827 — RSFiles! Unauthenticated File Upload → RCE...

Exploit for Unrestricted Upload of File with Dangerous Type in Joomlack Page_Builder_Ck

CVE-2026-56290 - Compagebuilderck Mass Exploit ⚠️ Disclai...

CVE-2026-48908

A vulnerability in SP Page Builder for Joomla allows unauthenticated users to upload arbitrary files, ultimately resulting in the upload and execution of PHP code...

CVE-2019-25762

Joomla! Component JoomProject 1.1.3.2 contains an information disclosure vulnerability that allows unauthenticated attackers to access sensitive user data by exploiting the projects endpoint. Attackers can send requests to index.php with option=comjpprojects&view=projects&tmpl=component&format=js...

CVE-2019-25755

Joomla Component vReview 1.9.11 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the cmId parameter. Attackers can send POST requests to the editReview task endpoint with URL-encoded SQL UNION...

CVE-2019-25752

Joomla! Component J-BusinessDirectory 4.9.7 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the type parameter. Attackers can send GET requests to index.php with the...

EUVD-2019-20197

Joomla! Component JoomCRM 1.1.1 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the dealid parameter. Attackers can send GET requests to index.php with option=comjoomcrm&view=contacts and inject SQL...

CVE-2019-25759

The CVE-2019-25759 entry describes an SQL injection in Joomla! component vbizz 1.0.7 where an authenticated attacker can craft the payid parameter to execute arbitrary SQL via POST to the employee management interface, potentially exposing database version and names. The provided sources confirm ...

CVE-2019-25759

Joomla! Component vBizz 1.0.7 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the payid parameter. Attackers can submit POST requests to the employee management interface with crafted payid array valu...

EUVD-2019-20195

Joomla! Component vBizz 1.0.7 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the payid parameter. Attackers can submit POST requests to the employee management interface with crafted payid array valu...

CVE-2019-25759 Joomla! Component vBizz 1.0.7 SQL Injection

Joomla! Component vBizz 1.0.7 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the payid parameter. Attackers can submit POST requests to the employee management interface with crafted payid array valu...

CVE-2019-25758

CVE-2019-25758 affects Joomla! component vBizz 1.0.7. The vulnerability is an unrestricted file upload in the profile_pic parameter, enabling authenticated attackers to upload arbitrary PHP files. By submitting malicious files via POST to the employee view endpoint, attackers can place PHP code i...

CVE-2019-25758 Joomla! Component vBizz 1.0.7 Remote Code Execution

Joomla! Component vBizz 1.0.7 contains an unrestricted file upload vulnerability that allows authenticated attackers to upload arbitrary PHP files by submitting malicious files through the profilepic parameter. Attackers can upload PHP files via POST requests to the employee view endpoint and...

CVE-2019-25756

CVE-2019-25756 affects Joomla! Component vAccount 2.0.2. The vulnerability is an SQL injection in the vaccount-dashboard/expense endpoint, where an unauthenticated attacker can inject payloads via the vid parameter to perform arbitrary SQL queries and exfiltrate sensitive data such as database ve...