CVE-2025-26854

A SQL injection vulnerability exists in the Articles Good Search extension for Joomla , affecting versions 1.0.0 through 1.2.4.0011 . This flaw allows an attacker to execute arbitrary SQL commands via the extension. Practical exploitation is possible, as evidenced by the existence of a verified e...

Joomcar Extensions Articles Calendar 注入漏洞

Joomcar Extensions Articles Calendar is a Joomla plugin from Joomcar Extensions. A SQL injection vulnerability exists in Joomcar Extensions Articles Calendar versions 1.0.0 through 1.0.1.0007, which stems from vulnerability to SQL injection attacks...

Joomcar Extensions Articles Good Search SQL注入漏洞

Joomcar Extensions Articles Good Search is a Joomla plugin from Joomcar Extensions, Inc. A SQL injection vulnerability exists in Joomcar Extensions Articles Good Search versions 1.0.0 through 1.2.4.0011, which stems from vulnerability to SQL injection attacks...

PT-2025-30011 · Joomla · Articles Calendar

Name of the Vulnerable Software and Affected Versions: Articles Calendar versions 1.0.0 through 1.0.1.0007 Description: A SQL injection issue exists in the Articles Calendar extension for Joomla. This allows attackers to execute arbitrary SQL commands. Recommendations: Update Articles Calendar to...

CVE-2025-26855: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection in Articles Calendar extension 1.0.0 - 1.0.1.0007 for Joomla allows attackers to execute arbitrary SQL commands...

PT-2025-30010 · Joomla · Joomla! +1

Name of the Vulnerable Software and Affected Versions: Articles Good Search extension for Joomla versions 1.0.0 through 1.2.4.0011 Description: A SQL injection issue exists in the Articles Good Search extension for Joomla. This allows attackers to execute arbitrary SQL commands. Recommendations:...

CVE-2025-26854: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection in Articles Good Search extension 1.0.0 - 1.2.4.0011 for Joomla allows attackers to execute arbitrary SQL commands...

Park

This project is used to study the...

AES Multimedia Gestnet 注入漏洞

AES Multimedia Gestnet is a contracted software from AES Multimedia. An injection vulnerability exists in AES Multimedia Gestnet version v1.07, which stems from an incorrect operation of the parameter fkremotocentral in the file /webservices/articles.php resulting in SQL injection...

CVE-2024-22559

LightCMS v2.0 is vulnerable to Cross Site Scripting XSS in the Content Management - Articles field...

CVE-2024-51897

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Erik Saulnier News Articles news-articles allows Stored XSS.This issue affects News Articles: from n/a through = 1.0.0...

CVE-2024-39313

toy-blog is a headless content management system implementation. Starting in version 0.5.4 and prior to version 0.6.1, articles with private visibility can be read if the reader does not set credentials for the request. Users should upgrade to 0.6.1 or later to receive a patch. No known workaroun...

CVE-2023-29638

Cross Site Scripting XSS vulnerability in WinterChenS my-site before commit 3f0423da6d5200c7a46e200da145c1f54ee18548, allows attackers to inject arbitrary web script or HTML via editing blog articles...

CVE-2023-27160

forem up to v2022.11.11 was discovered to contain a Server-Side Request Forgery SSRF via the component /articles/id. This vulnerability allows attackers to access network resources and sensitive information via a crafted POST request...

CVE-2022-44070

Zenario CMS 9.3.57186 is vulnerable to Cross Site Scripting XSS via News articles...

CVE-2022-1828

The PDF24 Articles To PDF WordPress plugin through 4.2.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

CVE-2020-29158

An issue was discovered in Zammad before 3.5.1. An Agent with Customer permissions in a Group can bypass intended access control on internal Articles via the Ticket detail view...

CVE-2012-4731

FAQ manager for Request Tracker RTFM before 2.4.5 does not properly check user rights, which allows remote authenticated users to create arbitrary articles in arbitrary classes via unknown vectors...

CVE-1999-0930

wwwboard allows a remote attacker to delete message board articles via a malformed argument...

CVE-2025-32390 EspoCRM vulnerable to HTML Injection into phishing, which may lead to account takeover

EspoCRM is a free, open-source customer relationship management platform. Prior to version 9.0.8, HTML Injection in Knowledge Base KB articles leads to complete page defacement imitating the login page. Authenticated users with the read knowledge article privilege can browse to the KB article and...