CVE-2021-23132

The CVE-2021-23132 issue affects Joomla! core: versions 3.0.0 through 3.9.24 allow image-upload paths in com_media that were not intended, enabling access to unintended directories. Root cause: insecure handling in com_media leading to path exposure and potential exploitation. Documented impact i...

Joomla! 2.5.x < 3.9.21 Multiple Vulnerabilities

According to its self-reported version, the instance of Joomla! running on the remote web server is 2.5.x prior to 3.9.21. It is, therefore, affected by multiple vulnerabilities. - Lack of escaping in modlatestactions allows Cross-Site Scripting XSS attacks. CVE-2020-24599 - Lack of input...

Joomla 2.5.x < 3.9.21 Multiple Vulnerabilities (5821-joomla-3-9-21)

According to its self-reported version, the instance of Joomla! running on the remote web server is 2.5.x prior to 3.9.21. It is, therefore, affected by multiple vulnerabilities. - Lack of escaping in modlatestactions allows XSS attacks. CVE-2020-24599 - Lack of input validation in comcontent lea...

[20210306] - Core - com_media allowed paths that are not intended for image uploads

commedia allowed paths that are not intended for image uploads...

[20200803] - Core - Directory traversal in com_media

Lack of input validation allows commedia root paths outside of the webroot...

Joomla Directory Traversal Vulnerability

Joomla! is a U.S. Open Source Matters team using PHP and MySQL development of a set of open source , cross-platform content management system CMS. Media Manager is used in one of the media management components . A path traversal vulnerability exists in commedia in Joomla! CMS versions 1.5.0...

Joomla SimpleImageUpload - Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla Simple Image Upload - Arbitrary File Upload Google Dork: inurl:option=comsimpleimageupload Date: 23.06.2015 Exploit Author: CrashBandicot @DosPerl Vendor Homepage: http://tuts4you.de/ Software Link:...

Joomla Simple Image Upload 1.0 Shell Upload

Exploit Title: Joomla Simple Image Upload - Arbitrary File Upload Google Dork: inurl:option=comsimpleimageupload Date: 23.06.2015 Exploit Author: CrashBandicot @DosPerl Vendor Homepage: http://tuts4you.de/ Software Link: http://tuts4you.de/96-development/156-simpleimageupload Version: 1.0 Tested...

Cross site scripting

Cross-site scripting XSS vulnerability in commedia in Joomla! 3.2.x before 3.2.5 and 3.3.x before 3.3.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-6631

Cross-site scripting XSS vulnerability in commedia in Joomla! 3.2.x before 3.2.5 and 3.3.x before 3.3.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Joomla! -- Core - XSS Vulnerability

The JSST and the Joomla! Security Center report: 20140901 - Core - XSS Vulnerability Inadequate escaping leads to XSS vulnerability in commedia...

[20140901] - Core - XSS Vulnerability

Inadequate escaping leads to XSS vulnerability in commedia...

Joomla component (com_media) Local File Inclusion Vulnerability

Exploit for php platform in category web applications Title : Joomla component commedia Local File Inclusion Vulnerability Author : KedAns-Dz E-mail : email protected Home : HMD/AM 30008/04300 - Algeria -00213555248701 Twitter page : twitter.com/kedans platform : php Impact : Local File Inclusion...

Joomla Media Local File Inclusion

Title : Joomla component commedia Local File Inclusion Vulnerability Author : KedAns-Dz E-mail : [email protected] Home : HMD/AM 30008/04300 - Algeria -00213555248701 Twitter page : twitter.com/kedans platform : php Impact : Local File Inclusion Tested on : Windows XP sp3 FR Note : BAC 2011...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the commedia component for Joomla! 1.5.x through 1.5.9 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2009-1280

CVE-2009-1280: In Joomla! 1.5.x through 1.5.9, multiple CSRF vulnerabilities affect the com_media component, allowing remote attackers to hijack user authentication via unknown vectors. Affected software is Joomla! 1.5.x with the com_media extension; the exact exploit paths and vulnerable request...

[20090301] - Core - Multiple XSS/CSRF

A series of XSS and CSRF faults exist in the administrator application. Affected administrator components include comadmin, commedia, comsearch. Both comadmin and comsearch contain XSS vulnerabilities, and commedia contains 2 CSRF vulnerabilities...