1135 matches found
CVE-2020-19450
SQL injection exists in the jdownloads 3.2.63 component for Joomla! via comjdownloads/helpers/jdownloadshelper.php, getUserLimits function in the list parameter...
CVE-2020-19447
SQL injection exists in the jdownloads 3.2.63 component for Joomla! comjdownloads/models/send.php via the fmarkedfilesid parameter...
CVE-2020-23971
gmapfp.org Joomla Component GMapFP J3.30pro is affected by Insecure Permissions. An attacker can access the upload function without authenticating to the application and also can upload files due the issues of unrestricted file uploads which can be bypassed by changing the content-type and name...
Unrestricted file upload
gmapfp.org Joomla Component GMapFP J3.30pro is affected by Insecure Permissions. An attacker can access the upload function without authenticating to the application and also can upload files due the issues of unrestricted file uploads which can be bypassed by changing the content-type and name...
CVE-2020-23972
In Joomla Component GMapFP Version J3.5 and J3.5free, an attacker can access the upload function without authenticating to the application and can also upload files which due to issues of unrestricted file uploads which can be bypassed by changing the content-type and name file too double...
Joomla Component com_hdwplayer SQL Injection
SQL Injection vulnerability in Joomla HDWPlayer component hdwplayersearch parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...
SQL injection vulnerability in the co*** parameter of the ordasoft-cck component of Joomla!
Developed with PHP language and MySQL database, Joomla! is a content management system. A SQL injection vulnerability exists in the co parameter of the Joomla! ordasoft-cck component. An attacker can exploit this vulnerability to obtain sensitive database information...
SQL injection vulnerability in the js*** parameter of the ordasoft-cck component of Joomla!
Developed with PHP language and MySQL database, Joomla! is a content management system. A SQL injection vulnerability exists in the js parameter of the Joomla! ordasoft-cck component. An attacker can exploit this vulnerability to obtain sensitive database information...
CVE-2015-7341
JNews Joomla Component before 8.5.0 allows arbitrary File Upload via Subscribers or Templates, as demonstrated by the .php5 extension...
CVE-2015-7339
JCE Joomla Component 2.5.0 to 2.5.2 allows arbitrary file upload via a .php file extension for an image file to the /comjce/editor/libraries/classes/browser.php script...
CVE-2015-7340
JEvents Joomla Component before 3.4.0 RC6 has SQL Injection via evid in a Manage Events action...
Sql injection
JNews Joomla Component before 8.5.0 allows SQL injection via upload thumbnail, Queue Search Field, Subscribers Search Field, or Newsletters Search Field...
Default credentials
JCE Joomla Component 2.5.0 to 2.5.2 allows arbitrary file upload via a .php file extension for an image file to the /comjce/editor/libraries/classes/browser.php script...
Sql injection
JEvents Joomla Component before 3.4.0 RC6 has SQL Injection via evid in a Manage Events action...
Design/Logic Flaw
JNews Joomla Component before 8.5.0 allows arbitrary File Upload via Subscribers or Templates, as demonstrated by the .php5 extension...
CVE-2015-7338
SQL Injection exists in AcyMailing Joomla Component before 4.9.5 via exportgeolocorder in a geolocationlongitude request to index.php...
CVE-2015-7338
The CVE refers to an SQL Injection in the AcyMailing Joomla Component prior to version 4.9.5, triggered by an exportgeolocorder parameter in a geolocation_longitude request to index.php. The vulnerability affects the component used within Joomla installations and can allow an attacker to manipula...
CVE-2015-7339
JCE Joomla Component 2.5.0 to 2.5.2 allows arbitrary file upload via a .php file extension for an image file to the /comjce/editor/libraries/classes/browser.php script...