Joomla! -- multiple vulnerabilities

The JSST and the Joomla! Security Center report: 20160801 - Core - ACL Violation Inadequate ACL checks in comcontent provide potential read access to data which should be access restricted to users with editown level. 20160802 - Core - XSS Vulnerability Inadequate escaping leads to XSS...

[20160801] - Core - ACL Violation

Inadequate ACL checks in comcontent provide potential read access to data which should be access restricted to users with editown level...

[20161203] - Core - Information Disclosure

Inadequate ACL checks in the Beez3 comcontent article layout override enables a user to view restricted content...

CVE-2015-7899

The comcontent component in Joomla! 3.x before 3.4.5 does not properly check ACLs, which allows remote attackers to obtain sensitive information via unspecified vectors...

Information disclosure

The comcontent component in Joomla! 3.x before 3.4.5 does not properly check ACLs, which allows remote attackers to obtain sensitive information via unspecified vectors...

CVE-2015-7899

The comcontent component in Joomla! 3.x before 3.4.5 does not properly check ACLs, which allows remote attackers to obtain sensitive information via unspecified vectors...

CVE-2015-7899

The CVE-2015-7899 entry affects Joomla! 3.x before 3.4.5, with the com_content component failing to properly check ACLs. This results in information disclosure where a remote attacker may obtain sensitive data via unspecified vectors. The issue is tied to inadequate ACL enforcement in com_content...

Joomla Content Blind SQL Injection

Title: ====== Joomla Component comcontent - Blind SQL Vulnerability Date: ===== 2011-11-11 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=323 VL-ID: ===== 323 Introduction: ============= Joomla is a free and open source content management system CMS for publishing...

Joomla com_content 1.5 - Blind SQL Vulnerability

Document Title: =============== Joomla comcontent 1.5 - Blind SQL Vulnerability References Source: ==================== Product: Joomla Component comcontent 1.5.24 URL: http://www.vulnerability-lab.com/getcontent.php?id=323 Release Date: ============= 2011-11-12 Vulnerability Laboratory ID VL-ID:...

CVE-2011-2509

Multiple cross-site scripting XSS vulnerabilities in Joomla! before 1.6.4 allow remote attackers to inject arbitrary web script or HTML via 1 the query string to the comcontact component, as demonstrated by the Itemid parameter to index.php; 2 the query string to the comcontent component, as...

Mambo task Parameter XSS

The version of Mambo installed on the remote host does not sanitize input to the 'task' parameter of 'index.php' when 'option' is set to 'comcontent' before using it to generate dynamic HTML. An attacker could leverage this issue to inject arbitrary HTML or script code into a user's browser to be...

Joomla 1.6.0 SQL Injection / PHP Execution

Requirements require 'msf/core' Class declaration class Metasploit3 'Joomla 1.6.0 // SQL Injection - PHP Execution', 'Description' = %q A vulnerability was discovered by Aung Khant that allows for exploitable SQL Injection attacks against a Joomla 1.6.0 install. This exploit attempts to leverage...

Joomla Component com_news com_article com_content com_event XSS

Exploit for php platform in category web applications ==================================================================== Joomla Component comnews comarticle comcontent comevent XSS Vuln ==================================================================== x Joomla Component News x Author: s4r4d0...

Sql injection

SQL injection vulnerability in the JoomlaBamboo JB Simpla Admin template for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in an article action to the comcontent component, reachable through index.php. NOTE: the vendor disputes this report, saying:...

CVE-2010-0158

CVE-2010-0158 describes a SQL injection risk in the JoomlaBamboo (JB) Simpla Admin template for Joomla! via the id parameter in an article action to the com_content component (accessible through index.php). The issue is asserted by multiple sources to allow remote SQL command execution, with a ve...

CVE-2009-3945

Unspecified vulnerability in the Front-End Editor in the comcontent component in Joomla! before 1.5.15 allows remote authenticated users, with Author privileges, to replace the articles of an arbitrary user via unknown vectors...

CVE-2009-3945

Unspecified vulnerability in the Front-End Editor in the comcontent component in Joomla! before 1.5.15 allows remote authenticated users, with Author privileges, to replace the articles of an arbitrary user via unknown vectors...

CVE-2009-3945

The CVE-2009-3945 entry concerns Joomla! prior to 1.5.15, specifically the Front-End Editor in the com_content component. The vulnerability allows remote authenticated users with Author privileges to replace the articles of an arbitrary user via unknown vectors. The available documents confirm th...

Sql injection

SQL injection vulnerability in the content component comcontent 1.0.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter in a blogcategory action to index.php...

CVE-2008-6923

CVE-2008-6923 describes an SQL injection in Joomla! (com_content 1.0.0) where the Itemid parameter in a blogcategory action to index.php allows remote attackers to execute arbitrary SQL commands. The vulnerability affects the content component and can lead to data exposure or modification as impl...