CVE-2020-10238

HK 制作 CVE-2020-10238: comtemplates における不適切なアクセス制御 - RCE CVE-2020-10239: comfields SQL field における不適切なアクセス制御 - RCE リンク https://developer.joomla.org/security-centre/804-20200303-core-incorrect-access-control-in-com-templates.html...

CVE-2020-10239

HK 作 CVE-2020-10239: comfields の SQL フィールドにおける不適切なアクセス制御 - RCE PoC 影響を受けるバージョン: Joomla コア 3.7.0 から 3.9.15 まで ユーザー要件: Manager アカウントバックエンドの最下位レベル 権限の取得: Manager から Superadmin に変更し、その後 RCE をトリガーします。 Joomla におけるリモートコード実行 RCE 認証情報を使用して cve202010239.py を実行し、RCE リンクにアクセス:...

CVE-2017-8917

CVE-2017-8917 CVE-2017-8917 - Joomla 3.7.0 'comfields' SQLインジェクション 依存関係 : pip install art pip install beautifulsoup4 エクスプロイト : python cve20178917.py...

joomla.3.7.0exploit

CVE-2017-8917 Joomla SQLi PoC このリポジトリには、Joomla の comfields SQL インジェクション脆弱性（CVE-2017-8917）に対する、シンプルで CTF 向けの概念実証（PoC）コードが含まれています。目標は、ワークフローを軽量に保ちつつ、検出、列挙、データ抽出という完全なエクスプロイトの流れを示すことです。 CVE-2017-8917 概要 脆弱性 : Joomla の comfields コンポーネントにおける SQL インジェクション。 根本原因 : listfullordering...

CVE-2017-8917

CVE-2017-8917 - Joomla 3.7.0 'comfields' SQLインジェクション CVE-2017-8917 の PoC...

CVE-2026-48958

In Joomla! Core, the CVE-2026-48958 issue is due to improper access control in the com_fields webservice endpoints, enabling unauthorized users to create custom fields via web services. Affected versions include Joomla! 4.0.x (before 5.4.7) and 6.0.x (before 6.1.2). The underlying impact is eleva...

BIT-JOOMLA-2022-23796 [20220304] - Core - Missing input validation within com_fields class inputs

An issue was discovered in Joomla! 3.7.0 through 3.10.6. Lack of input validation could allow an XSS attack using comfields...

Joomla core 3.7.0-3.10.15-elts,4.0.0-4.4.5,5.0.0-5.1.1 - Unauthenticated XSS in com_fields default field value vulnerability

Unauthenticated XSS in comfields default field value vulnerability discovered by ? in WordPress Core Joomla versions 3.7.0-3.10.15-elts,4.0.0-4.4.5,5.0.0-5.1.1...

CVE-2022-23796 [20220304] - Core - Missing input validation within com_fields class inputs

An issue was discovered in Joomla! 3.7.0 through 3.10.6. Lack of input validation could allow an XSS attack using comfields...

CVE-2022-23796

CVE-2022-23796 affects Joomla! 3.7.0 through 3.10.6, where lack of input validation in the com_fields class inputs enables cross-site scripting (XSS). The connected sources confirm the vulnerable component and the XSS impact, but do not specify exploit details or available patches within the prov...

CVE-2022-23796: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Joomla! 3.7.0 through 3.10.6. Lack of input validation could allow an XSS attack using comfields...

CVE-2022-23796

An issue was discovered in Joomla! 3.7.0 through 3.10.6. Lack of input validation could allow an XSS attack using comfields...

[20220304] - Core - Missing input validation within com_fields class inputs

Lack of input validation could allow an XSS attack using comfields...

CVE-2020-10239

CVE-2020-10239 affects Joomla! core prior to 3.9.16, where an Incorrect Access Control in the SQL fieldtype of com_fields may allow non‑superadmin users to access restricted data. Affected versions include 3.7.0–3.9.15; the issue is fixed in 3.9.16+. Some connected sources note a GitHub exploit P...

CVE-2020-10239

An issue was discovered in Joomla! before 3.9.16. Incorrect Access Control in the SQL fieldtype of comfields allows access for non-superadmin users...

CVE-2020-10239: Incorrect Authorization

An issue was discovered in Joomla! before 3.9.16. Incorrect Access Control in the SQL fieldtype of comfields allows access for non-superadmin users...

Joomla! access control error vulnerability (CNVD-2020-20998)

Joomla! is the U.S. Open Source Matters team of a set of PHP and MySQL development using open source , cross-platform content management system CMS. An access control error vulnerability exists in the comfields SQL field in Joomla! versions 3.7.0 through 3.9.15, which can be exploited by attacker...

[20200305] - Core - Incorrect Access Control in com_fields SQL field

Incorrect Access Control in the SQL fieldtype of comfields allows access for non-superadmin users...

Joomla! 3.3.x < 3.8.4 Multiple Vulnerabilities

According to its self-reported version number, the detected Joomla! application is affected by multiple vulnerabilities : - The XSS vulnerability in module chromes as noted in the 20180101 announcement affects 3.0.0 through 3.8.3. CVE-2018-6380 - The XSS vulnerability in comfields as noted in the...

Joomla! 3.2.x < 3.8.4 Multiple Vulnerabilities

According to its self-reported version number, the detected Joomla! application is affected by multiple vulnerabilities : - The XSS vulnerability in module chromes as noted in the 20180101 announcement affects 3.0.0 through 3.8.3. CVE-2018-6380 - The XSS vulnerability in comfields as noted in the...