CVE-2020-10238

एचके द्वारा निर्मित CVE-2020-10238: comtemplates में अनुचित अभिगम नियंत्रण - RCE CVE-2020-10239: comfields SQL फ़ील्ड में अनुचित अभिगम नियंत्रण - RCE लिंक https://developer.joomla.org/security-centre/804-20200303-core-incorrect-access-control-in-com-templates.html...

CVE-2020-10239

Realizzato da HK CVE-2020-10239: Controllo di accesso errato nel campo SQL comfields - RCE PoC Versione interessata: core di Joomla dalla 3.7.0 alla 3.9.15 Requisito utente: account Manager livello più basso nel back-end Accesso ottenuto: cambia il tuo account da Manager a Superadmin, quindi...

joomla.3.7.0exploit

CVE-2017-8917 Joomla SQLi PoC Questa repository contiene un proof of concept PoC semplice e adatto a CTF per la vulnerabilità di SQL injection comfields di Joomla CVE-2017-8917. L'obiettivo è mantenere il flusso di lavoro leggero mostrando comunque l'intero flusso di sfruttamento: rilevamento,...

CVE-2017-8917

CVE-2017-8917 CVE-2017-8917 - Joomla 3.7.0 'comfields' SQL-Injection. Abhängigkeiten : root@kitploit: pip install art pip install beautifulsoup4 Exploit : root@kitploit: python cve20178917.py...

CVE-2017-8917

CVE-2017-8917 - Iniezione SQL 'comfields' in Joomla 3.7.0 PoC di CVE-2017-8917...

CVE-2026-48958

In Joomla! Core, the CVE-2026-48958 issue is due to improper access control in the com_fields webservice endpoints, enabling unauthorized users to create custom fields via web services. Affected versions include Joomla! 4.0.x (before 5.4.7) and 6.0.x (before 6.1.2). The underlying impact is eleva...

BIT-JOOMLA-2022-23796 [20220304] - Core - Missing input validation within com_fields class inputs

An issue was discovered in Joomla! 3.7.0 through 3.10.6. Lack of input validation could allow an XSS attack using comfields...

Joomla core 3.7.0-3.10.15-elts,4.0.0-4.4.5,5.0.0-5.1.1 - Unauthenticated XSS in com_fields default field value vulnerability

Unauthenticated XSS in comfields default field value vulnerability discovered by ? in WordPress Core Joomla versions 3.7.0-3.10.15-elts,4.0.0-4.4.5,5.0.0-5.1.1...

CVE-2022-23796

CVE-2022-23796 affects Joomla! 3.7.0 through 3.10.6, where lack of input validation in the com_fields class inputs enables cross-site scripting (XSS). The connected sources confirm the vulnerable component and the XSS impact, but do not specify exploit details or available patches within the prov...

CVE-2022-23796 [20220304] - Core - Missing input validation within com_fields class inputs

An issue was discovered in Joomla! 3.7.0 through 3.10.6. Lack of input validation could allow an XSS attack using comfields...

CVE-2022-23796

An issue was discovered in Joomla! 3.7.0 through 3.10.6. Lack of input validation could allow an XSS attack using comfields...

[20220304] - Core - Missing input validation within com_fields class inputs

Lack of input validation could allow an XSS attack using comfields...

CVE-2020-10239

CVE-2020-10239 affects Joomla! core prior to 3.9.16, where an Incorrect Access Control in the SQL fieldtype of com_fields may allow non‑superadmin users to access restricted data. Affected versions include 3.7.0–3.9.15; the issue is fixed in 3.9.16+. Some connected sources note a GitHub exploit P...

Joomla! access control error vulnerability (CNVD-2020-20998)

Joomla! is the U.S. Open Source Matters team of a set of PHP and MySQL development using open source , cross-platform content management system CMS. An access control error vulnerability exists in the comfields SQL field in Joomla! versions 3.7.0 through 3.9.15, which can be exploited by attacker...

[20200305] - Core - Incorrect Access Control in com_fields SQL field

Incorrect Access Control in the SQL fieldtype of comfields allows access for non-superadmin users...

Joomla! 3.2.x < 3.8.4 Multiple Vulnerabilities

According to its self-reported version number, the detected Joomla! application is affected by multiple vulnerabilities : - The XSS vulnerability in module chromes as noted in the 20180101 announcement affects 3.0.0 through 3.8.3. CVE-2018-6380 - The XSS vulnerability in comfields as noted in the...

Joomla! 1.6.x < 3.8.4 Multiple Vulnerabilities

According to its self-reported version number, the detected Joomla! application is affected by multiple vulnerabilities : - The XSS vulnerability in module chromes as noted in the 20180101 announcement affects 3.0.0 through 3.8.3. CVE-2018-6380 - The XSS vulnerability in comfields as noted in the...

Joomla! 3.6.x < 3.8.4 Multiple Vulnerabilities

According to its self-reported version number, the detected Joomla! application is affected by multiple vulnerabilities : - The XSS vulnerability in module chromes as noted in the 20180101 announcement affects 3.0.0 through 3.8.3. CVE-2018-6380 - The XSS vulnerability in comfields as noted in the...

Joomla! 3.3.x < 3.8.4 Multiple Vulnerabilities

According to its self-reported version number, the detected Joomla! application is affected by multiple vulnerabilities : - The XSS vulnerability in module chromes as noted in the 20180101 announcement affects 3.0.0 through 3.8.3. CVE-2018-6380 - The XSS vulnerability in comfields as noted in the...

Joomla 'com_fields' RCE Vulnerability (20180506)

Joomla is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:joomla:joomla";...