300 matches found
Cross site scripting
An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. It is possible to craft messages in a way that JavaScript gets executed on the side of the receiving user when the message is opened, aka XSS...
CVE-2019-9922
The CVE-2019-9922 entry corresponds to Harmis JE Messenger for Joomla! 1.2.2, where a Local File Inclusion/Directory Traversal vulnerability allows an attacker to read arbitrary files. The connected Nuclei template confirms the affected software and classifies the issue as LFI, describing that ex...
CVE-2019-9921
CVE-2019-9921 affects Harmis JE Messenger component 1.2.2 for Joomla!. The issue is an access-control error that allows reading information that should be accessible only to another user, leading to potential information disclosure. The vulnerability is documented across multiple sources (NVD/RH ...
CVE-2019-9921
An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. It is possible to read information that should only be accessible by a different user...
CVE-2019-9920
An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. It is possible to perform an action within the context of the account of another user...
CVE-2019-9920
CVE-2019-9920 affects Harmis JE Messenger component version 1.2.2 for Joomla!. The issue is an access-control weakness that allows performing an action in the context of another user’s account. Documents consistently describe the vulnerable component and version, but do not provide concrete techn...
CVE-2019-9919
CVE-2019-9919 affects Harmis JE Messenger component for Joomla! (version 1.2.2). The issue is a cross-site scripting (XSS) vulnerability where crafted messages can cause JavaScript to execute in the recipient’s browser when opened. The available sources consistently describe the vulnerability but...
CVE-2019-9919
An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. It is possible to craft messages in a way that JavaScript gets executed on the side of the receiving user when the message is opened, aka XSS...
CVE-2019-9918
An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. Input does not get validated and queries are not written in a way to prevent SQL injection. Therefore arbitrary SQL-Statements can be executed in the database...
CVE-2019-9918
CVE-2019-9918 affects Harmis JE Messenger for Joomla! v1.2.2. The root cause is unvalidated input and poorly written queries, enabling arbitrary SQL statements in the database. Exploitation details are not provided in the documents. A remediation patch/version is not specified in the given materi...
PT-2019-19936 · Harmis · Harmis Je Messenger
Name of the Vulnerable Software and Affected Versions: Harmis JE Messenger component version 1.2.2 Description: An issue was discovered in the Harmis JE Messenger component for Joomla!, allowing an action to be performed within the context of another user's account. Recommendations: For version...
PT-2019-19938 · Joomla · Harmis Je Messenger
Name of the Vulnerable Software and Affected Versions: Harmis JE Messenger component version 1.2.2 for Joomla! Description: An issue allows Directory Traversal, which enables read access to arbitrary files. Recommendations: For Harmis JE Messenger component version 1.2.2, update to a version that...
PT-2019-19934 · Joomla · Harmis Je Messenger
Name of the Vulnerable Software and Affected Versions: Harmis JE Messenger component version 1.2.2 for Joomla! Description: The issue allows for the execution of arbitrary SQL statements in the database due to a lack of input validation and improper query writing, making it susceptible to SQL...
PT-2019-19935 · Joomla · Harmis Je Messenger
Name of the Vulnerable Software and Affected Versions: Harmis JE Messenger component version 1.2.2 Description: An issue was discovered in the Harmis JE Messenger component for Joomla!. It is possible to craft messages in a way that JavaScript gets executed on the side of the receiving user when...
PT-2019-19937 · Joomla · Harmis Je Messenger
Name of the Vulnerable Software and Affected Versions: Harmis JE Messenger component version 1.2.2 Description: An issue in the Harmis JE Messenger component for Joomla allows reading information that should only be accessible by a different user. Recommendations: For version 1.2.2, update to a...
je-cherche.info XSS vulnerability
Open Bug Bounty ID: OBB-690636 Description| Value ---|--- Affected Website:| je-cherche.info Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...
je-gmbh.de XSS vulnerability
Open Bug Bounty ID: OBB-579764 Description| Value ---|--- Affected Website:| je-gmbh.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Joomla! JE PayperVideo 3.0.0 SQL Injection
...
