Balbooa Gallery 跨站脚本漏洞

Balbooa Gallery is a Joomla extension from Balbooa Inc. A cross-site scripting vulnerability exists in Balbooa Gallery versions 1.0.0-2.4.0, which stems from a stored cross-site scripting attack...

Balbooa Forms SQL注入漏洞

Balbooa Forms is a Joomla extension from Balbooa Inc. A SQL injection vulnerability exists in Balbooa Forms versions 1.0.0-2.3.1.1, which stems from an incorrect manipulation of the parameter id leading to a SQL injection attack...

PT-2025-30025 · Rsjoomla · Rsfiles!

Name of the Vulnerable Software and Affected Versions: RSFiles! component versions 1.16.3 through 1.17.7 Description: A denial-of-service issue exists in the RSFiles! component of Joomla. The problem allows unauthenticated remote attackers to disrupt service access through the search feature...

CVE-2025-49468

A SQL injection vulnerability in No Boss Calendar component before 5.0.7 for Joomla was discovered. The vulnerability allows remote authenticated users to execute arbitrary SQL commands via the idmodule parameter...

CVE-2025-49467

A SQL injection vulnerability in JEvents component before 3.6.88 and 3.6.82.1 for Joomla was discovered. The extension is vulnerable to SQL injection via publicly accessible actions to list events by date ranges...

CVE-2025-32465

A stored XSS vulnerability in RSTickets! component 1.9.12 - 3.3.0 for Joomla was discovered. It allows attackers to perform cross-site scripting XSS attacks via sending crafted payload...

CVE-2025-32466

A SQL injection vulnerability in RSMediaGallery! component 1.7.4 - 2.1.7 for Joomla was discovered. The issue occurs within the dashboard component, where user-supplied input is not properly sanitized before being stored and rendered. An attacker can inject malicious JavaScript code into text...

CVE-2025-30085

Remote code execution vulnerability in RSForm!pro component 3.0.0 - 3.3.14 for Joomla was discovered. The issue occurs within the submission export feature and requires administrative access to the export feature...

CVE-2025-49468

A SQL injection vulnerability in No Boss Calendar component before 5.0.7 for Joomla was discovered. The vulnerability allows remote authenticated users to execute arbitrary SQL commands via the idmodule parameter...

CVE-2025-49468

The CVE-2025-49468 entry describes a SQL injection in the No Boss Calendar Joomla extension (versions prior to 5.0.7). The vulnerability allows remote authenticated users to execute arbitrary SQL via the id_module parameter. Impact is reported as high for confidentiality, integrity, and availabil...

CVE-2025-49468 Joomla Extension - nobossextensions.com - SQL injection vulnerability in No Boss Calendar component before 5.0.7 for Joomla

A SQL injection vulnerability in No Boss Calendar component before 5.0.7 for Joomla was discovered. The vulnerability allows remote authenticated users to execute arbitrary SQL commands via the idmodule parameter...

CVE-2025-49468 Joomla Extension - nobossextensions.com - SQL injection vulnerability in No Boss Calendar component before 5.0.7 for Joomla

A SQL injection vulnerability in No Boss Calendar component before 5.0.7 for Joomla was discovered. The vulnerability allows remote authenticated users to execute arbitrary SQL commands via the idmodule parameter...

No Boss Calendar SQL注入漏洞

No Boss Calendar is a Joomla calendar plugin from Brazilian company No Boss. A SQL injection vulnerability exists in No Boss Calendar versions prior to 5.0.7, which stems from an SQL injection in the idmodule parameter...

CVE-2025-49467

A SQL injection vulnerability in JEvents component before 3.6.88 and 3.6.82.1 for Joomla was discovered. The extension is vulnerable to SQL injection via publicly accessible actions to list events by date ranges...

CVE-2025-49467 Joomla Extension - jevents.net - SQL injection vulnerability in JEvents component before 3.6.88 and 3.6.82.1 for Joomla

A SQL injection vulnerability in JEvents component before 3.6.88 and 3.6.82.1 for Joomla was discovered. The extension is vulnerable to SQL injection via publicly accessible actions to list events by date ranges...

CVE-2025-49467 Joomla Extension - jevents.net - SQL injection vulnerability in JEvents component before 3.6.88 and 3.6.82.1 for Joomla

A SQL injection vulnerability in JEvents component before 3.6.88 and 3.6.82.1 for Joomla was discovered. The extension is vulnerable to SQL injection via publicly accessible actions to list events by date ranges...

CVE-2025-49467

CVE-2025-49467 describes a SQL injection in the JEvents Joomla extension. Affected: JEvents component for Joomla versions prior to 3.6.88 and prior to 3.6.82.1. Root cause: vulnerability in publicly accessible actions that list events by date ranges, allowing injection through the date-range quer...

PT-2025-25333 · Joomla · Jevents

Name of the Vulnerable Software and Affected Versions: JEvents component for Joomla versions prior to 3.6.88 JEvents component for Joomla versions prior to 3.6.82.1 Description: A SQL injection vulnerability in the JEvents component for Joomla was discovered, allowing unauthorized access to data...

CVE-2025-32465

A stored XSS vulnerability in RSTickets! component 1.9.12 - 3.3.0 for Joomla was discovered. It allows attackers to perform cross-site scripting XSS attacks via sending crafted payload...

CVE-2025-32466

A SQL injection vulnerability in RSMediaGallery! component 1.7.4 - 2.1.7 for Joomla was discovered. The issue occurs within the dashboard component, where user-supplied input is not properly sanitized before being stored and rendered. An attacker can inject malicious JavaScript code into text...