[20200803] - Core - Directory traversal in com_media

Lack of input validation allows commedia root paths outside of the webroot...

Joomla Directory Traversal Vulnerability

Joomla! is a U.S. Open Source Matters team using PHP and MySQL development of a set of open source , cross-platform content management system CMS. Media Manager is used in one of the media management components . A path traversal vulnerability exists in commedia in Joomla! CMS versions 1.5.0...

Joomla SimpleImageUpload - Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla Simple Image Upload - Arbitrary File Upload Google Dork: inurl:option=comsimpleimageupload Date: 23.06.2015 Exploit Author: CrashBandicot @DosPerl Vendor Homepage: http://tuts4you.de/ Software Link:...

Joomla Simple Image Upload 1.0 Shell Upload

Exploit Title: Joomla Simple Image Upload - Arbitrary File Upload Google Dork: inurl:option=comsimpleimageupload Date: 23.06.2015 Exploit Author: CrashBandicot @DosPerl Vendor Homepage: http://tuts4you.de/ Software Link: http://tuts4you.de/96-development/156-simpleimageupload Version: 1.0 Tested...

Cross site scripting

Cross-site scripting XSS vulnerability in commedia in Joomla! 3.2.x before 3.2.5 and 3.3.x before 3.3.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-6631

Cross-site scripting XSS vulnerability in commedia in Joomla! 3.2.x before 3.2.5 and 3.3.x before 3.3.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Joomla! -- Core - XSS Vulnerability

The JSST and the Joomla! Security Center report: 20140901 - Core - XSS Vulnerability Inadequate escaping leads to XSS vulnerability in commedia...

[20140901] - Core - XSS Vulnerability

Inadequate escaping leads to XSS vulnerability in commedia...

Joomla component (com_media) Local File Inclusion Vulnerability

Exploit for php platform in category web applications Title : Joomla component commedia Local File Inclusion Vulnerability Author : KedAns-Dz E-mail : email protected Home : HMD/AM 30008/04300 - Algeria -00213555248701 Twitter page : twitter.com/kedans platform : php Impact : Local File Inclusion...

Joomla Media Local File Inclusion

Title : Joomla component commedia Local File Inclusion Vulnerability Author : KedAns-Dz E-mail : [email protected] Home : HMD/AM 30008/04300 - Algeria -00213555248701 Twitter page : twitter.com/kedans platform : php Impact : Local File Inclusion Tested on : Windows XP sp3 FR Note : BAC 2011...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the commedia component for Joomla! 1.5.x through 1.5.9 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2009-1280

CVE-2009-1280: In Joomla! 1.5.x through 1.5.9, multiple CSRF vulnerabilities affect the com_media component, allowing remote attackers to hijack user authentication via unknown vectors. Affected software is Joomla! 1.5.x with the com_media extension; the exact exploit paths and vulnerable request...

[20090301] - Core - Multiple XSS/CSRF

A series of XSS and CSRF faults exist in the administrator application. Affected administrator components include comadmin, commedia, comsearch. Both comadmin and comsearch contain XSS vulnerabilities, and commedia contains 2 CSRF vulnerabilities...