19202 matches found
Joomla Security Breach
Joomla is an open source, cross-platform content management system CMS developed by the Open Source Matters team using PHP and MySQL. A security vulnerability exists in Joomla DPCalendar that stems from the presence of a cross-site scripting XSS vulnerability...
SmartCalc osTicky Security Vulnerability
SmartCalc osTicky is a Joomla extension that provides Joomla front-end integration with osTicket. A security vulnerability exists in SmartCalc osTicky versions prior to 2.2.8, which stems from a vulnerability that allows an attacker to control the return parameter in a URL to point to a malicious...
[20240204] - Core - XSS in mail address outputs
Inadequate escaping of mail addresses lead to XSS vulnerabilities in various components...
PT-2024-1806 · Joomla · Joomla!
Name of the Vulnerable Software and Affected Versions: Joomla! affected versions not specified Description: The issue is related to inadequate escaping of mail addresses, which leads to XSS vulnerabilities in various components. This could allow a remote attacker to execute arbitrary code by...
Joomla! vulnerability is being actively exploited
The Cybersecurity and Infrastructure Security Agency CISA has added a vulnerability for the Joomla! Content Management System CMS to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. This means that Federal Civilian Executive Branch FCEB agencies need to...
Exploit for SQL Injection in Stackideas Easydiscuss
CVE-2023-51810 Description Blind SQL injection vulnerabil...
[20240203] - Core - XSS in media selection fields
Inadequate input validation for media selection fields lead to XSS vulnerabilities in various extensions...
PT-2024-1842 · Joomla · Joomla!
Name of the Vulnerable Software and Affected Versions: Joomla! affected versions not specified Description: The issue is related to inadequate protection of the web page structure, allowing a remote attacker to conduct a cross-site scripting XSS attack. Inadequate input validation for media...
CISA Adds Six Known Exploited Vulnerabilities to Catalog
CISA has added six new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2023-38203 Adobe ColdFusion Deserialization of Untrusted Data Vulnerability CVE-2023-29300 Adobe ColdFusion Deserialization of Untrusted Data Vulnerability...
Joomla! Improper Access Control Vulnerability
Joomla! contains an improper access control vulnerability that allows unauthorized access to webservice endpoints...
Exploit for Improper Access Control in Joomla Joomla\!
CVE-2023-23752 Description This repository contains Pytho...
Joomla! 5.x < 5.0.1 Information Disclosure
According to its self-reported version, the instance of Joomla! running on the remote web server is 1.6.x prior to 4.4.1 or 5.x prior to 5.0.1. It is, therefore, affected by an information disclosure vulnerability. The language file parsing process could be manipulated to expose environment...
Joomla! 1.6.x < 4.4.1 Information Disclosure
According to its self-reported version, the instance of Joomla! running on the remote web server is 1.6.x prior to 4.4.1 or 5.x prior to 5.0.1. It is, therefore, affected by an information disclosure vulnerability. The language file parsing process could be manipulated to expose environment...
CVE-2023-49707
SQLi vulnerability in S5 Register module for Joomla...
CVE-2023-49708
SQLi vulnerability in Starshop component for Joomla...
CVE-2023-49707
SQLi vulnerability in S5 Register module for Joomla...
CVE-2023-49708
SQLi vulnerability in Starshop component for Joomla...
CVE-2023-40628
A reflected XSS vulnerability was discovered in the Extplorer component for Joomla...