Joomla! < 3.6.1 Multiple Vulnerabilities

According to its self-reported version number, the Joomla! installation running on the remote web server is prior to 3.6.1. It is, therefore, affected by multiple vulnerabilities : - A cross-site scripting XSS vulnerability exists in the mail component due to improper sanitization of input before...

Joomla! -- multiple vulnerabilities

The JSST and the Joomla! Security Center report: 20160801 - Core - ACL Violation Inadequate ACL checks in comcontent provide potential read access to data which should be access restricted to users with editown level. 20160802 - Core - XSS Vulnerability Inadequate escaping leads to XSS...

[20160801] - Core - ACL Violation

Inadequate ACL checks in comcontent provide potential read access to data which should be access restricted to users with editown level...

[20161203] - Core - Information Disclosure

Inadequate ACL checks in the Beez3 comcontent article layout override enables a user to view restricted content...

CVE-2015-7899

The comcontent component in Joomla! 3.x before 3.4.5 does not properly check ACLs, which allows remote attackers to obtain sensitive information via unspecified vectors...

Information disclosure

The comcontent component in Joomla! 3.x before 3.4.5 does not properly check ACLs, which allows remote attackers to obtain sensitive information via unspecified vectors...

CVE-2015-7899

The comcontent component in Joomla! 3.x before 3.4.5 does not properly check ACLs, which allows remote attackers to obtain sensitive information via unspecified vectors...

CVE-2015-7899

The CVE-2015-7899 entry affects Joomla! 3.x before 3.4.5, with the com_content component failing to properly check ACLs. This results in information disclosure where a remote attacker may obtain sensitive data via unspecified vectors. The issue is tied to inadequate ACL enforcement in com_content...

CVE-2015-7899: Improper Access Control

The comcontent component in Joomla! 3.x before 3.4.5 does not properly check ACLs, which allows remote attackers to obtain sensitive information via unspecified vectors...

Joomla Content Blind SQL Injection

Title: ====== Joomla Component comcontent - Blind SQL Vulnerability Date: ===== 2011-11-11 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=323 VL-ID: ===== 323 Introduction: ============= Joomla is a free and open source content management system CMS for publishing...

Joomla com_content 1.5 - Blind SQL Vulnerability

Document Title: =============== Joomla comcontent 1.5 - Blind SQL Vulnerability References Source: ==================== Product: Joomla Component comcontent 1.5.24 URL: http://www.vulnerability-lab.com/getcontent.php?id=323 Release Date: ============= 2011-11-12 Vulnerability Laboratory ID VL-ID:...

CVE-2011-2509

Multiple cross-site scripting XSS vulnerabilities in Joomla! before 1.6.4 allow remote attackers to inject arbitrary web script or HTML via 1 the query string to the comcontact component, as demonstrated by the Itemid parameter to index.php; 2 the query string to the comcontent component, as...

CVE-2011-2509: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Joomla! before 1.6.4 allow remote attackers to inject arbitrary web script or HTML via 1 the query string to the comcontact component, as demonstrated by the Itemid parameter to index.php; 2 the query string to the comcontent component, as...

Mambo task Parameter XSS

The version of Mambo installed on the remote host does not sanitize input to the 'task' parameter of 'index.php' when 'option' is set to 'comcontent' before using it to generate dynamic HTML. An attacker could leverage this issue to inject arbitrary HTML or script code into a user's browser to be...

Joomla 1.6.0 SQL Injection / PHP Execution

Requirements require 'msf/core' Class declaration class Metasploit3 'Joomla 1.6.0 // SQL Injection - PHP Execution', 'Description' = %q A vulnerability was discovered by Aung Khant that allows for exploitable SQL Injection attacks against a Joomla 1.6.0 install. This exploit attempts to leverage...

CVE-2010-3712: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Joomla! 1.5.x before 1.5.21 and 1.6.x before 1.6.1 allows remote attackers to inject arbitrary web script or HTML via vectors involving "multiple encoded entities," as demonstrated by the query string to index.php in the comweblinks or comcontent componen...

Joomla Component com_news com_article com_content com_event XSS

Exploit for php platform in category web applications ==================================================================== Joomla Component comnews comarticle comcontent comevent XSS Vuln ==================================================================== x Joomla Component News x Author: s4r4d0...

Sql injection

SQL injection vulnerability in the JoomlaBamboo JB Simpla Admin template for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in an article action to the comcontent component, reachable through index.php. NOTE: the vendor disputes this report, saying:...

CVE-2010-0158

CVE-2010-0158 describes a SQL injection risk in the JoomlaBamboo (JB) Simpla Admin template for Joomla! via the id parameter in an article action to the com_content component (accessible through index.php). The issue is asserted by multiple sources to allow remote SQL command execution, with a ve...

CVE-2010-0158: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the JoomlaBamboo JB Simpla Admin template for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in an article action to the comcontent component, reachable through index.php. NOTE: the vendor disputes this report, saying:...