15 matches found
EUVD-2015-7267
Malware in sbrugna...
EUVD-2015-7266
Malware in sbrugna...
CVE-2015-7342
JNews Joomla Component before 8.5.0 allows SQL injection via upload thumbnail, Queue Search Field, Subscribers Search Field, or Newsletters Search Field...
CVE-2015-7343
JNews Joomla Component before 8.5.0 has XSS via the mailingsearch parameter...
Design/Logic Flaw
JNews Joomla Component before 8.5.0 allows arbitrary File Upload via Subscribers or Templates, as demonstrated by the .php5 extension...
CVE-2015-7342
JNews Joomla Component before 8.5.0 allows SQL injection via upload thumbnail, Queue Search Field, Subscribers Search Field, or Newsletters Search Field...
CVE-2015-7343
JNews Joomla Component before 8.5.0 has XSS via the mailingsearch parameter...
CVE-2015-7343
JNews Joomla Component before 8.5.0 has XSS via the mailingsearch parameter...
CVE-2015-7342: Improper Neutralization of Special Elements used in an SQL Command
JNews Joomla Component before 8.5.0 allows SQL injection via upload thumbnail, Queue Search Field, Subscribers Search Field, or Newsletters Search Field...
PT-2020-7886
Name of the Vulnerable Software and Affected Versions: JNews Joomla Component versions prior to 8.5.0 Description: The issue allows SQL injection via several fields, including upload thumbnail, Queue Search Field, Subscribers Search Field, or Newsletters Search Field. Recommendations: For version...
PT-2020-7885
Name of the Vulnerable Software and Affected Versions: JNews Joomla Component versions prior to 8.5.0 Description: The issue allows for arbitrary file upload, which can be achieved via Subscribers or Templates. This is demonstrated by the ability to upload files with the .php5 extension...
CVE-2015-7343: Improper Neutralization of Input During Web Page Generation
JNews Joomla Component before 8.5.0 has XSS via the mailingsearch parameter...
CVE-2015-7341: Unrestricted Upload of File with Dangerous Type
JNews Joomla Component before 8.5.0 allows arbitrary File Upload via Subscribers or Templates, as demonstrated by the .php5 extension...
PT-2020-7887
Name of the Vulnerable Software and Affected Versions: JNews Joomla Component versions prior to 8.5.0 Description: The issue is related to a Cross-Site Scripting XSS vulnerability. It occurs via the mailingsearch parameter. Recommendations: For versions prior to 8.5.0, update to version 8.5.0 or...