Privilege escalation

Joomla! Core is prone to a vulnerability that lets attackers upload arbitrary files because the application fails to properly verify user-supplied input. An attacker can exploit this vulnerability to upload arbitrary code and run it in the context of the webserver process. This may facilitate...

CVE-2010-1433

CVE-2010-1433 affects Joomla! Core 1.5.x (1.5.0 to 1.5.15). The root cause is improper validation of user-supplied input, enabling an attacker to upload arbitrary files and potentially run code in the webserver process. This can lead to unauthorized access or privilege escalation; other attacks a...

Design/Logic Flaw

An issue was discovered in Joomla! Core before 3.8.8. Inadequate checks allowed users to see the names of tags that were either unpublished or published with restricted view permission...

CVE-2018-11321

An issue was discovered in comfields in Joomla! Core before 3.8.8. Inadequate filtering allows users authorised to create custom fields to manipulate the filtering options and inject an unvalidated option...