[20180102] - Core - XSS vulnerability in com_fields

Inadequate input filtering in comfields leads to a XSS vulnerability in multiple field types, i.e. list, radio and checkbox...

CVE-2017-16633: Exposure of Sensitive Information to an Unauthorized Actor

In Joomla! before 3.8.2, a logic bug in comfields exposed read-only information about a site's custom fields to unauthorized users...

CVE-2017-16633

Technical details about CVE-2017-16633 are not publicly available in the provided connected documents; no specific affected product versions, root cause, or remediation are disclosed here. Monitor for updates from official advisories.

CVE-2017-16633

In Joomla! before 3.8.2, a logic bug in comfields exposed read-only information about a site's custom fields to unauthorized users...

Joomla! Core 'com_fields' Information Disclosure Vulnerability (Nov 2017)

Joomla is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:joomla:joomla";...

http-vuln-cve2017-8917 NSE Script

An SQL Injection vulnerability affecting Joomla! 3.7.x before 3.7.1 allows for unauthenticated users to execute arbitrary SQL commands. This vulnerability was caused by a new component, comfields, which was introduced in version 3.7. This component is publicly accessible, which means this can be...

Joomla com_fields Component SQL Injection (CVE-2017-8917)

An SQL injection vulnerability exists in Joomla comfields Component. Remote attackers may leverage this vulnerability to gain arbitrary code execution over the vulnerable server...

Joomla! 3.7.0 SQL injection attack vulnerability analysis-vulnerability warning-the black bar safety net

Joomla is a world second most popular content management system. It uses the PHP language together with MySQL database the development of the software system, can in Linux, Windows, MacOSX, etc. a variety of different platforms perform, and currently by the open source organization Open Source...

Joomla com_fields SQL Injection

SQL Injection vulnerability in Joomla comfields getListQuery method Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

Joomla! v3. 7 SQL injection high-risk vulnerability is a technical analysis of CVE-2017-8917-a vulnerability warning-the black bar safety net

comfields components loopholes, comfields Assembly is in 3. 7 version Added, if you use this version, will be affected and should be updated soon. This component publicly accessible, which means that any be able to access your site the user can initiate the attack. Vulnerability details ! From th...

[20171103] - Core - Information Disclosure

A logic bug in comfields exposed read-only information about a site's custom fields to unauthorized users...

Joomla Component Fields SQLi Remote Code Execution

This module exploits a SQL injection vulnerability in the comfields component, which was introduced to the core of Joomla in version 3.7.0. Module Options msf use exploit/unix/webapp/joomla/comfieldssqlirce msf undefinedcomfieldssqlirce show actions ...actions... msf undefinedcomfieldssqlirce set...