CVE-2015-7341

JNews Joomla Component before 8.5.0 allows arbitrary File Upload via Subscribers or Templates, as demonstrated by the .php5 extension...

CVE-2015-7339

JCE Joomla Component 2.5.0 to 2.5.2 allows arbitrary file upload via a .php file extension for an image file to the /comjce/editor/libraries/classes/browser.php script...

CVE-2015-7340

JEvents Joomla Component before 3.4.0 RC6 has SQL Injection via evid in a Manage Events action...

Sql injection

JEvents Joomla Component before 3.4.0 RC6 has SQL Injection via evid in a Manage Events action...

Design/Logic Flaw

JNews Joomla Component before 8.5.0 allows arbitrary File Upload via Subscribers or Templates, as demonstrated by the .php5 extension...

Default credentials

JCE Joomla Component 2.5.0 to 2.5.2 allows arbitrary file upload via a .php file extension for an image file to the /comjce/editor/libraries/classes/browser.php script...

Sql injection

JNews Joomla Component before 8.5.0 allows SQL injection via upload thumbnail, Queue Search Field, Subscribers Search Field, or Newsletters Search Field...

CVE-2015-7338

The CVE refers to an SQL Injection in the AcyMailing Joomla Component prior to version 4.9.5, triggered by an exportgeolocorder parameter in a geolocation_longitude request to index.php. The vulnerability affects the component used within Joomla installations and can allow an attacker to manipula...

CVE-2015-7338

SQL Injection exists in AcyMailing Joomla Component before 4.9.5 via exportgeolocorder in a geolocationlongitude request to index.php...

CVE-2015-7339

JCE Joomla Component 2.5.0 to 2.5.2 allows arbitrary file upload via a .php file extension for an image file to the /comjce/editor/libraries/classes/browser.php script...

CVE-2015-7340

JEvents Joomla Component before 3.4.0 RC6 has SQL Injection via evid in a Manage Events action...

CVE-2015-7342

JNews Joomla Component before 8.5.0 allows SQL injection via upload thumbnail, Queue Search Field, Subscribers Search Field, or Newsletters Search Field...

CVE-2015-7342

CVE-2015-7342 affects the JNews Joomla Component prior to 8.5.0. It allows SQL injection via multiple vectors: upload thumbnail, Queue Search Field, Subscribers Search Field, or Newsletters Search Field. The available connected documents confirm the affected product and inputs, but do not provide...

CVE-2015-7343

JNews Joomla Component before 8.5.0 has XSS via the mailingsearch parameter...

Code injection

JNews Joomla Component before 8.5.0 has XSS via the mailingsearch parameter...

CVE-2015-7343

JNews Joomla Component before 8.5.0 has XSS via the mailingsearch parameter...

Joomla Component com_jssupportticket File Disclosure

File disclosure vulnerability in Joomla Component comjssupportticket name parameter Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

Joomla! component com_jssupportticket SQL Injection Vulnerability

Joomla! is an open source content management system CMS. A SQL injection vulnerability exists in the Joomla! component comjssupportticket. An attacker can exploit the vulnerability to obtain sensitive database information...

Joomla! Component JS Support Ticket (component com_jssupportticket) 1.1.5 - Arbitrary File Download

Joomla! Component JS Support Ticket component comjssupportticket 1.1.5 - Arbitrary File Download Exploit Title: Joomla! component comjssupportticket - Arbitrary File Download Dork: inurl:"index.php?option=comjssupportticket" Date: 08.08.19 Exploit Author: qw3rTyTy Vendor Homepage:...

Joomla! Component JS Support Ticket (component com_jssupportticket) 1.1.5 - Arbitrary File Download

Exploit Title: Joomla! component comjssupportticket - Arbitrary File Download Dork: inurl:"index.php?option=comjssupportticket" Date: 08.08.19 Exploit Author: qw3rTyTy Vendor Homepage: http://joomsky.com/ Software Link: https://www.joomsky.com/46/download/1.html Version: 1.1.5 Tested on:...