1164 matches found
CVE-2026-105606 Joomla Extension - joomlaboat.com - Unauthenticated arbitrary file upload in Custom Tables < 3.7.8
Joomla Extension - joomlaboat.com - Unauthenticated arbitrary file upload in Custom Tables 3.7.8 - An unauthenticated attacker can upload a polyglot file with an attacker-controlled extension to the web-accessible tmp directory of any Joomla site that exposes a public Custom Tables submission for...
CVE-2026-105606 Joomla Extension - joomlaboat.com - Unauthenticated arbitrary file upload in Custom Tables < 3.7.8
Joomla Extension - joomlaboat.com - Unauthenticated arbitrary file upload in Custom Tables 3.7.8 - An unauthenticated attacker can upload a polyglot file with an attacker-controlled extension to the web-accessible tmp directory of any Joomla site that exposes a public Custom Tables submission for...
CVE-2026-105606
The Joomla Extension - joomlaboat.com (versions prior to 3.7.8 ) is vulnerable to an unauthenticated arbitrary file upload in the Custom Tables component. An attacker can upload a polyglot file with a controlled extension to a web-accessible tmp directory via a public submission form, as the stor...
EUVD-2026-115360
Joomla Extension - dj-extensions.com - IDOR vulnerability allowing cross-account ad access in DJ-Classifieds 3.11.3 - A “duplicate my ad” convenience feature on the new-ad form site/models/additem.php loaded an existing advert by its raw numeric ID with no check that the ad belonged to the...
CVE-2026-105600
Joomla Extension - php-web-design.com - RCE via setting strings in StageIt 1.0-5.7.5, 6.0-6.3.5...
CVE-2026-102802
Joomla Extension - regularlabs.com - PHP code injection vector in Sourcerer extension 17.0.1 when used with Articles Anywhere extension 20.1.1 - Sourcerer can restrict PHP in articles according to article-author trust; the exact creator and last-editor rule varies by release. Articles Anywhere ca...
CVE-2026-103420
Joomla Extension - php-web-design.com - CSRF for various actions in StageIt 1.0-5.7.5, 6.0-6.3.5...
CVE-2026-102802 Joomla Extension - regularlabs.com - PHP code injection vector in Sourcerer extension < 17.0.1 when used with Articles Anywhere extension < 20.1.1
Joomla Extension - regularlabs.com - PHP code injection vector in Sourcerer extension 17.0.1 when used with Articles Anywhere extension 20.1.1 - Sourcerer can restrict PHP in articles according to article-author trust; the exact creator and last-editor rule varies by release. Articles Anywhere ca...
EUVD-2026-115179
Joomla Extension - php-web-design.com - CSRF for various actions in StageIt 1.0-5.7.5, 6.0-6.3.5...
CVE-2026-103420
The StageIt Joomla extension by php-web-design.com is vulnerable to Cross-Site Request Forgery (CSRF) in versions 1.0-5.7.5 and 6.0-6.3.5 . This vulnerability allows an attacker to perform various actions on behalf of a user. The documents do not provide specific details regarding the root cause,...
CVE-2026-103420 Joomla Extension - php-web-design.com - CSRF for various actions in StageIt 1.0-5.7.5, 6.0-6.3.5
Joomla Extension - php-web-design.com - CSRF for various actions in StageIt 1.0-5.7.5, 6.0-6.3.5...
CVE-2026-103420 Joomla Extension - php-web-design.com - CSRF for various actions in StageIt 1.0-5.7.5, 6.0-6.3.5
Joomla Extension - php-web-design.com - CSRF for various actions in StageIt 1.0-5.7.5, 6.0-6.3.5...
CVE-2026-105600 Joomla Extension - php-web-design.com - RCE via setting strings in StageIt 1.0-5.7.5, 6.0-6.3.5
Joomla Extension - php-web-design.com - RCE via setting strings in StageIt 1.0-5.7.5, 6.0-6.3.5...
EUVD-2026-115178
Joomla Extension - php-web-design.com - RCE via setting strings in StageIt 1.0-5.7.5, 6.0-6.3.5...
CVE-2026-105600
The Joomla Extension by php-web-design.com is vulnerable to Remote Code Execution (RCE) in the StageIt component. The flaw is caused by improper control of generation of code (CWE-94) when processing setting strings. This vulnerability affects StageIt versions 1.0-5.7.5 and 6.0-6.3.5 . The impact...
CVE-2026-105600 Joomla Extension - php-web-design.com - RCE via setting strings in StageIt 1.0-5.7.5, 6.0-6.3.5
Joomla Extension - php-web-design.com - RCE via setting strings in StageIt 1.0-5.7.5, 6.0-6.3.5...
EUVD-2026-115177
Joomla Extension - php-web-design.com - Reflected XSS in StageIt 1.0-5.7.5, 6.0-6.3.5...
CVE-2026-105601 Joomla Extension - php-web-design.com - Reflected XSS in StageIt 1.0-5.7.5, 6.0-6.3.5
Joomla Extension - php-web-design.com - Reflected XSS in StageIt 1.0-5.7.5, 6.0-6.3.5...
CVE-2026-105601
The StageIt Joomla extension by php-web-design.com is vulnerable to Reflected Cross-Site Scripting (XSS) in versions 1.0-5.7.5 and 6.0-6.3.5 . The vulnerability is caused by the improper neutralization of input during web page generation (CWE-79 ). This flaw allows an attacker to execute maliciou...