CVE-2019-9922

An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. Directory Traversal allows read access to arbitrary files...

CVE-2019-9921

An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. It is possible to read information that should only be accessible by a different user...

CVE-2019-9919

An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. It is possible to craft messages in a way that JavaScript gets executed on the side of the receiving user when the message is opened, aka XSS...

CVE-2019-9920

An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. It is possible to perform an action within the context of the account of another user...

CVE-2019-9918

An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. Input does not get validated and queries are not written in a way to prevent SQL injection. Therefore arbitrary SQL-Statements can be executed in the database...

Sql injection

An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. Input does not get validated and queries are not written in a way to prevent SQL injection. Therefore arbitrary SQL-Statements can be executed in the database...

Cross site scripting

An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. It is possible to craft messages in a way that JavaScript gets executed on the side of the receiving user when the message is opened, aka XSS...

CVE-2019-9919

An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. It is possible to craft messages in a way that JavaScript gets executed on the side of the receiving user when the message is opened, aka XSS...

CVE-2019-9922

An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. Directory Traversal allows read access to arbitrary files...

Directory traversal

An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. Directory Traversal allows read access to arbitrary files...

CVE-2019-9922

The CVE-2019-9922 entry corresponds to Harmis JE Messenger for Joomla! 1.2.2, where a Local File Inclusion/Directory Traversal vulnerability allows an attacker to read arbitrary files. The connected Nuclei template confirms the affected software and classifies the issue as LFI, describing that ex...

CVE-2019-9921

CVE-2019-9921 affects Harmis JE Messenger component 1.2.2 for Joomla!. The issue is an access-control error that allows reading information that should be accessible only to another user, leading to potential information disclosure. The vulnerability is documented across multiple sources (NVD/RH ...

CVE-2019-9921

An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. It is possible to read information that should only be accessible by a different user...

CVE-2019-9920

An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. It is possible to perform an action within the context of the account of another user...

CVE-2019-9920

CVE-2019-9920 affects Harmis JE Messenger component version 1.2.2 for Joomla!. The issue is an access-control weakness that allows performing an action in the context of another user’s account. Documents consistently describe the vulnerable component and version, but do not provide concrete techn...

CVE-2019-9919

CVE-2019-9919 affects Harmis JE Messenger component for Joomla! (version 1.2.2). The issue is a cross-site scripting (XSS) vulnerability where crafted messages can cause JavaScript to execute in the recipient’s browser when opened. The available sources consistently describe the vulnerability but...

CVE-2019-9919

An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. It is possible to craft messages in a way that JavaScript gets executed on the side of the receiving user when the message is opened, aka XSS...

CVE-2019-9918

An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. Input does not get validated and queries are not written in a way to prevent SQL injection. Therefore arbitrary SQL-Statements can be executed in the database...

CVE-2019-9918

CVE-2019-9918 affects Harmis JE Messenger for Joomla! v1.2.2. The root cause is unvalidated input and poorly written queries, enabling arbitrary SQL statements in the database. Exploitation details are not provided in the documents. A remediation patch/version is not specified in the given materi...

PT-2019-19936 · Harmis · Harmis Je Messenger

Name of the Vulnerable Software and Affected Versions: Harmis JE Messenger component version 1.2.2 Description: An issue was discovered in the Harmis JE Messenger component for Joomla!, allowing an action to be performed within the context of another user's account. Recommendations: For version...