joomla3 -- vulnerabilitiesw

JSST reports: Inadequate escaping in modbanners leads to a stored XSS vulnerability. Inadequate escaping in comcontact leads to a stored XSS vulnerability Inadequate checks at the Global Configuration Text Filter settings allowed a stored XSS. Inadequate checks at the Global Configuration helpurl...

Joomla! < 3.8.13 Multiple Vulnerabilities

Joomla! is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:joomla:joomla"; ifdescription...

CVE-2018-17859

An issue was discovered in Joomla! before 3.8.13. Inadequate checks in comcontact could allow mail submission in disabled forms...

Design/Logic Flaw

An issue was discovered in Joomla! before 3.8.13. Inadequate checks in comcontact could allow mail submission in disabled forms...

CVE-2018-17859

CVE-2018-17859 affects Joomla! before 3.8.13, where inadequate checks in the com_contact component allow mail submission from disabled contact forms. The vulnerability stems from insufficient form-state validation in core code, enabling an attacker to trigger mail submission even when forms are d...

[20181001] - Core - Hardening com_contact contact form

Inadequate checks in comcontact could allowed mail submission in disabled forms...

Joomla Component com_contact Info SQL Injection (CVE-2008-5494)

An SQL injection vulnerability has been reported in Digitalgreys Com Contactinfo. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

CVE-2014-7983

Cross-site scripting XSS vulnerability in comcontact in Joomla! CMS 3.1.2 through 3.2.x before 3.2.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Joomla Front-edit Address Book Component (com_addressbook) Blind SQL Injection

No description provided by source. 1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : Joomla comaddressbook Blind Sqli Vulnerability Date : july 4,2010 Critical Level : HIGH vendor URL :http://b-elektro.no/ Author...

Limbo CMS <= 1.0.4.2L (com_contact) Remote Code Execution Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? printr' ----------------------------------------------------------------------------- Limbo = 1.0.4.2L comcontact remote commands execution exploit by rgod [email protected] site: http://retrogod.altervista.org dorks:...

[20140302] - Core - XSS Vulnerability

Inadequate escaping leads to XSS vulnerability in comcontact...

Joomla! 2.5.x < 2.5.16 / 3.x < 3.1.6 Multiple XSS

According to its self-reported version number, the Joomla! installation running on the remote web server is 2.5.x prior to 2.5.16 or 3.x prior to 3.1.6. It is, therefore, affected by multiple cross-site XSS scripting vulnerabilities, related to the comcontact, comweblinks, and comnewsfeeds...

[20131103] Core XSS Vulnerability

Inadequate filtering leads to XSS vulnerability in comcontact...

[20131101] Core XSS Vulnerability

Inadequate filtering leads to XSS vulnerability in comcontact...

[20131102] Core XSS Vulnerability

Inadequate filtering leads to XSS vulnerability in comcontact, comweblinks, comnewsfeeds...

CVE-2011-2509

Multiple cross-site scripting XSS vulnerabilities in Joomla! before 1.6.4 allow remote attackers to inject arbitrary web script or HTML via 1 the query string to the comcontact component, as demonstrated by the Itemid parameter to index.php; 2 the query string to the comcontent component, as...

Sql injection

Multiple SQL injection vulnerabilities in Joomla! 1.5.x before 1.5.22 allow remote attackers to execute arbitrary SQL commands via the 1 filterorder or 2 filterorderDir parameter in a comcontact action to index.php, a different vulnerability than CVE-2010-4166. NOTE: the provenance of this...

Joomla! Component Address Book - Blind SQL Injection

Joomla! Component Address Book - Blind SQL Injection 1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : Joomla comaddressbook Blind Sqli Vulnerability Date : july 4,2010 Critical Level : HIGH vendor URL...

Joomla com_addressbook Blind SQL Injection Vulnerability

Exploit for php platform in category web applications ======================================================== Joomla comaddressbook Blind SQL Injection Vulnerability ======================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 ...

CVE-2006-4859

Limbo CMS (Lite Mambo) — affected: Limbo/Lite Mambo com_contact in versions up to 1.0.4.2L. The contact.html.php file’s contact_attach parameter allows unrestricted file uploads using a filename with a double extension, bypassing a restrictive regex. This enables remote attackers to upload PHP co...