Joomla! 3.6.x < 3.8.4 Multiple Vulnerabilities

According to its self-reported version number, the detected Joomla! application is affected by multiple vulnerabilities : - The XSS vulnerability in module chromes as noted in the 20180101 announcement affects 3.0.0 through 3.8.3. CVE-2018-6380 - The XSS vulnerability in comfields as noted in the...

Joomla! 1.6.x < 3.8.4 Multiple Vulnerabilities

According to its self-reported version number, the detected Joomla! application is affected by multiple vulnerabilities : - The XSS vulnerability in module chromes as noted in the 20180101 announcement affects 3.0.0 through 3.8.3. CVE-2018-6380 - The XSS vulnerability in comfields as noted in the...

Joomla 'com_fields' RCE Vulnerability (20180506)

Joomla is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:joomla:joomla";...

Remote Code Execution Vulnerability in Joomla!

Joomla! is the United States Open Source Matters team developed a set of open source content management system CMS. The system provides RSS feeds , site search and other features.Joomla! Core is a Joomla! kernel . A security vulnerability exists in comfields in Joomla! Core versions prior to 3.8....

Design/Logic Flaw

An issue was discovered in comfields in Joomla! Core before 3.8.8. Inadequate filtering allows users authorised to create custom fields to manipulate the filtering options and inject an unvalidated option...

CVE-2018-11321

An issue was discovered in comfields in Joomla! Core before 3.8.8. Inadequate filtering allows users authorised to create custom fields to manipulate the filtering options and inject an unvalidated option...

CVE-2018-11321

CVE-2018-11321 affects Joomla! Core via the com_fields component. The issue arises from inadequate filtering in the field filtering logic, allowing authorized users who create custom fields to manipulate filtering options and inject an unvalidated option, potentially enabling remote code executio...

CVE-2018-11321: Improper Input Validation

An issue was discovered in comfields in Joomla! Core before 3.8.8. Inadequate filtering allows users authorised to create custom fields to manipulate the filtering options and inject an unvalidated option...

[20180506] - Core - Filter field in com_fields allows remote code execution

Inadequate filtering allows users authorised to create custom fields to manipulate the filtering options and inject an unvalidated option...

Joomla Fields SQL Injection / Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Joomla Component Fields SQLi Remote Code Execution', 'Description' = %q This module exploits a SQL injection vulnerability in the comfields...

Joomla Fields Component - SQL Injection Remote Code Execution Exploit

Exploit for php platform in category web applications This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Joomla Component Fields SQLi Remote Code Execution', 'Description' = %q This module exploit...

Joomla! 1.5.0 < 3.8.4 Multiple Vulnerabilities

According to its self-reported version number, the Joomla! installation running on the remote web server is 1.5.0 or later but prior to 3.8.4. It is, therefore, affected by multiple XSS and SQLi vulnerabilities : - The XSS vulnerability in module chromes as noted in the 20180101 announcement...

Joomla! cross-site scripting vulnerability (CNVD-2018-04204)

Joomla! is an open source content management system CMS developed by the Open Source Matters team, which provides RSS feeds, site search, etc. comfields is one of the warning error loading components. A cross-site scripting vulnerability exists in comfields in Joomla! that stems from the program...

Design/Logic Flaw

In Joomla! before 3.8.4, inadequate input filtering in comfields leads to an XSS vulnerability in multiple field types, i.e., list, radio, and checkbox...

CVE-2018-6377

In Joomla! before 3.8.4, inadequate input filtering in comfields leads to an XSS vulnerability in multiple field types, i.e., list, radio, and checkbox...

CVE-2018-6377

In Joomla! before 3.8.4, inadequate input filtering in comfields leads to an XSS vulnerability in multiple field types, i.e., list, radio, and checkbox...

CVE-2018-6377

In Joomla! before 3.8.4, inadequate input filtering in comfields leads to an XSS vulnerability in multiple field types, i.e., list, radio, and checkbox...

CVE-2018-6377

In Joomla! before 3.8.4, inadequate input filtering in comfields leads to an XSS vulnerability in multiple field types, i.e., list, radio, and checkbox...

CVE-2018-6377

CVE-2018-6377 is a cross-site scripting (XSS) in Joomla! Core component com_fields caused by inadequate input filtering. The vulnerability affects Joomla! CMS versions 3.7.0 through 3.8.3 and can lead to arbitrary script execution in the target user’s browser when fields are manipulated. Remediat...

CVE-2018-6377: Improper Neutralization of Input During Web Page Generation

In Joomla! before 3.8.4, inadequate input filtering in comfields leads to an XSS vulnerability in multiple field types, i.e., list, radio, and checkbox...