CVE-2026-48908-by-yora

🔐 CVE-2026-48908 Scanner & Safe PoC Joomla SP Page Builder — Unauthenticated File Upload / Potential RCE Developed byyora 📌 About This project is a security research and vulnerability detection tool developed by yora to help identify CVE-2026-48908 affecting SP Page Builder for Joomla. The...

CVE-2024-5737

CVE-2024-5737 AdmirorFrames Joomla! 확장 프로그램 HTML 태그로 설정된 너비 및 높이 필드를 가진 PNG를 생성하는 PHP 스크립트 예제입니다: root@kitploit: $height=0x3c; $im = imagecreate$width, $height; $hex=unpack'H',$payload; $chunks=strsplit$hex1, 6; for$i=0; $i count$chunks; $i++ $colorchunks=strsplit$chunks$i, 2;...

CVE-2024-5736

CVE-2024-5736 Расширение AdmirorFrames для Joomla! 5.0 - Подделка серверных запросов SSRF Хронология Уязвимость сообщена вендору: 26.01.2024 Выпущена исправленная версия 5.0: 06.06.2024 Публичное раскрытие: 28.06.2024 Описание Подделка серверных запросов Server-Side Request Forgery в расширении...

CVE-2024-5735

CVE-2024-5735 AdmirorFrames Joomla! 확장 params'templatesBASE' = JPATHBASE . DIRECTORYSEPARATOR . 'plugins' . DIRECTORYSEPARATOR . 'content' . $path . 'templates' . DIRECTORYSEPARATOR; 이 문제는 이미지 경로를 구성할 때 JPATHBASE 변수를 직접 사용하여 발생했습니다. 이 문제는 AdmirorFrames Joomla! 확장 버전 5.0에서 수정되었습니다...

CVE-2019-15120

CVE-2019-15120 Joomla!용 Kunena 확장 5.1.14 이전 버전에서 BBCode를 통한 XSS 익스플로잇 정보 설명: Joomla!용 Kunena 확장 5.1.14 이전 버전에서는 모든 사용자가 BBcode를 지원하는 모든 필드에 특수 메시지를 전송하여 저장형 XSS 공격을 실행할 수 있습니다. 그 결과, 이 취약점은 쉽게 RCE로 이어질 수 있습니다. 영향받는 버전: Joomla!용 Kunena 확장 5.x 5.1.14 연구자: Andrey Skuratov...

CVE-2023-27842

CVE-2023-27842 eXtplorer 2.1.15 – Небезопасные разрешения, ведущие к удаленному выполнению кода с аутентификацией Домашняя страница разработчика: http://extplorer.net/ Ссылка на программное обеспечение: http://extplorer.net/attachments/download/99/eXtplorer2.1.15.zip Версия: 2.1.15 Установка...

CVE-2026-65761

CVE-2026-65761 - EasyStore Pro의 filtersortby를 통한 SQL 인젝션 개념 증명PoC 이 저장소는 EasyStore Joomla 확장 프로그램의 1.0.02.0.2포함 버전에 영향을 미치는 인증되지 않은 SQL 인젝션 취약점인 CVE-2026-65761에 대한 교육용 개념 증명PoC을 제공합니다. filtersortby 매개변수가 라이선스로 제한되어 있으므로 플러그인의 Pro 버전만 영향을 받습니다. PoCpoc.py는 제품 검색...

CVE-2026-76565

Отражённый XSS через параметры фильтра pricefrom / priceto в PhocaCart PhocaCart ≤ 6.1.7 — неаутентифицированный злоумышленник внедряет произвольный JavaScript через специально сформированный URL фильтра цены СВОДКА PhocaCart 6.1.7 для Joomla уязвим к отражённому межсайтовому скриптингу XSS через...

CVE-2026-78077

Joomla Extension - joomshaper.com - Stored Cross-Site Scripting XSS in MegaMenu Layout Container & Embed Inputs in Helix Ultimate 2.2.10 - Unsanitized column and item configuration values stored within the MegaMenu layout JSON were rendered without complete contextual escaping, allowing injection...

CVE-2026-78079

Joomla Extension - joomshaper.com - Open Redirect via Base64 Return Parameter in Helix Ultimate 2.2.10 - Return redirect parameters accepted arbitrary Base64 strings without verifying whether the resolved target was an internal site URL via Uri::isInternal...

CVE-2026-78078

Joomla Extension - joomshaper.com - Privileged File Upload Bypass via Content Spoofing in Helix Ultimate 2.2.10 - Image uploads previously validated only file extension and basic size parameters. Non-image files disguised with raster extensions could be uploaded. Added strict MIME verification an...

CVE-2026-78076

Joomla Extension - joomshaper.com - Broken Access Control & Missing Authorization in MegaMenu Settings in Helix Ultimate 2.2.10 - The AJAX endpoint save-megamenu-settings failed to enforce item-level and menu-level edit permissions core.edit on commenus.item.id or core.admin. An authenticated use...

CVE-2026-78075 Joomla Extension - joomshaper.com - Broken Object-Level Authorization in Blog Image Deletion in Helix Ultimate < 2.2.10

Joomla Extension - joomshaper.com - Broken Object-Level Authorization in Blog Image Deletion in Helix Ultimate 2.2.10 - Blog::removeimage checked whether the user was authorized to edit the article ID passed in the request, but did not verify whether the specified image path src belonged to that...

EUVD-2026-68529

Joomla Extension - joomshaper.com - Broken Object-Level Authorization in Blog Image Deletion in Helix Ultimate 2.2.10 - Blog::removeimage checked whether the user was authorized to edit the article ID passed in the request, but did not verify whether the specified image path src belonged to that...

CVE-2026-78076

Helix Ultimate (joomshaper.com), a Joomla template/extension, is affected in versions below 2.2.10 . The vulnerability is a Broken Access Control issue in the MegaMenu Settings feature: the AJAX endpoint save-megamenu-settings failed to enforce item-level and menu-level edit permissions (core.edi...

EUVD-2026-68528

Joomla Extension - joomshaper.com - Broken Access Control & Missing Authorization in MegaMenu Settings in Helix Ultimate 2.2.10 - The AJAX endpoint save-megamenu-settings failed to enforce item-level and menu-level edit permissions core.edit on commenus.item.id or core.admin. An authenticated use...

CVE-2026-78076 Joomla Extension - joomshaper.com - Broken Access Control & Missing Authorization in MegaMenu Settings in Helix Ultimate < 2.2.10

Joomla Extension - joomshaper.com - Broken Access Control & Missing Authorization in MegaMenu Settings in Helix Ultimate 2.2.10 - The AJAX endpoint save-megamenu-settings failed to enforce item-level and menu-level edit permissions core.edit on commenus.item.id or core.admin. An authenticated use...

CVE-2026-78076 Joomla Extension - joomshaper.com - Broken Access Control & Missing Authorization in MegaMenu Settings in Helix Ultimate < 2.2.10

Joomla Extension - joomshaper.com - Broken Access Control & Missing Authorization in MegaMenu Settings in Helix Ultimate 2.2.10 - The AJAX endpoint save-megamenu-settings failed to enforce item-level and menu-level edit permissions core.edit on commenus.item.id or core.admin. An authenticated use...

CVE-2026-78078 Joomla Extension - joomshaper.com - Privileged File Upload Bypass via Content Spoofing in Helix Ultimate < 2.2.10

Joomla Extension - joomshaper.com - Privileged File Upload Bypass via Content Spoofing in Helix Ultimate 2.2.10 - Image uploads previously validated only file extension and basic size parameters. Non-image files disguised with raster extensions could be uploaded. Added strict MIME verification an...

EUVD-2026-68527

Joomla Extension - joomshaper.com - Privileged File Upload Bypass via Content Spoofing in Helix Ultimate 2.2.10 - Image uploads previously validated only file extension and basic size parameters. Non-image files disguised with raster extensions could be uploaded. Added strict MIME verification an...