CVE-2020-15700

An issue was discovered in Joomla! through 3.9.19. A missing token check in the ajaxinstall endpoint of cominstaller causes a CSRF vulnerability...

Cross site request forgery (csrf)

An issue was discovered in Joomla! through 3.9.19. A missing token check in the ajaxinstall endpoint of cominstaller causes a CSRF vulnerability...

CVE-2020-15700

CVE-2020-15700 affects Joomla! up to 3.9.19: the ajax_install endpoint in com_installer lacks a token check, causing a CSRF vulnerability. Affected: Joomla! through 3.9.19. Impact: CSRF (network vector; user interaction required; confidentiality/integrity/availability LOW). Mitigation: upgrade to...

CVE-2020-15700: Cross-Site Request Forgery (CSRF)

An issue was discovered in Joomla! through 3.9.19. A missing token check in the ajaxinstall endpoint of cominstaller causes a CSRF vulnerability...

[20200701] - Core - CSRF in com_installer ajax_install endpoint

A missing token check in the ajaxinstall endpoint cominstaller causes a CSRF vulnerability...

Joomla! < 3.8.13 Multiple Vulnerabilities

Joomla! is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:joomla:joomla"; ifdescription...

Cross site request forgery (csrf)

An issue was discovered in Joomla! before 3.8.13. cominstaller actions do not have sufficient CSRF hardening in the backend...

CVE-2018-17858

An issue was discovered in Joomla! before 3.8.13. cominstaller actions do not have sufficient CSRF hardening in the backend...

CVE-2018-17858

An issue was discovered in Joomla! before 3.8.13. cominstaller actions do not have sufficient CSRF hardening in the backend...

CVE-2018-17858

An issue was discovered in Joomla! before 3.8.13. cominstaller actions do not have sufficient CSRF hardening in the backend...

CVE-2018-17858

Joomla! prior to 3.8.13 is affected by a CSRF vulnerability in the backend of com_installer actions due to insufficient CSRF hardening. The issue can lead to unauthorized operations (impacting confidentiality, integrity, and availability as noted in CVSS) and is mitigated by upgrading to Joomla! ...

CVE-2018-17858: Cross-Site Request Forgery (CSRF)

An issue was discovered in Joomla! before 3.8.13. cominstaller actions do not have sufficient CSRF hardening in the backend...

[20181005] - Core - CSRF hardening in com_installer

Added additional CSRF hardening in cominstaller actions in the backend...

Joomla 2.5.4 SQL Injection

TITLE ....... Joomla 2.5.4 with components/extensions I found @ webs DATE ........ 07.04.2012 AUTOHR ...... http://hauntit.blogspot.com SOFT LINK ... http://joomla.org VERSION ..... 2.5.4 TESTED ON ... LAMP ----------------------------------------------------------------------- 1. What is this? 2...

CVE-2007-4781: Improper Input Validation

administrator/index.php in the installer component cominstaller in Joomla! 1.5 Beta1, Beta2, and RC1 allows remote authenticated administrators to upload arbitrary files to tmp/ via the "Upload Package File" functionality, which is accessible when cominstaller is the value of the option parameter...