19203 matches found
CVE-2023-40656
CVE-2023-40656 is a reflected XSS vulnerability in Joomla’s Quickform component. Across sources, the issue is described as a reflected XSS in Quickform, affecting Joomla extensions (notably plasma-web.ru listing) for versions 1.0.0–3.3.01. The CVSS 3.1 vector is AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A...
CVE-2023-49707
CVE-2023-49707 is an SQL injection in the S5 Register Joomla extension. Affected versions: 1.0.0–3.0.0. Root cause is a SQLi in the S5 Register module, with CVSSv3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (base score 9.8, critical). Exploitation details are not provided in the documents. No remedia...
CVE-2023-40656 Extension - plasma-web.ru - Reflected XSS in Quickform component for Joomla 1.0.0-3.3.01
A reflected XSS vulnerability was discovered in the Quickform component for Joomla...
CVE-2023-40657
CVE-2023-40657 affects the Joomdoc component for Joomla. The connected sources confirm a reflected XSS vulnerability in Joomdoc, with the CVE listed under extensions such as artio.net and related Red Hat/NVD entries. The NVD entry shows a CVSSv3.1 base score of 6.1 (Medium) with Network access, U...
CVE-2023-40657 Extension - artio.net - Reflected XSS in Joomdoc component for Joomla 1.0.0-4.0.5
A reflected XSS vulnerability was discovered in the Joomdoc component for Joomla...
CVE-2023-40630 Extension - joomcode.com - Unauthenticated LFI/SSRF in JCDashboards component for Joomla 1.0.0-1.1.30
Unauthenticated LFI/SSRF in JCDashboards component for Joomla...
CVE-2023-40655
The CVE-2023-40655 entry concerns a reflected XSS in the Proforms Basic component for Joomla. Multiple sources (NVD, Red Hat, CVE List, Vulnrichment, and others) describe it as a reflected XSS affecting the Proforms Basic extension for Joomla, but none provide explicit affected versions or concre...
CVE-2023-40655 Extension - mooj.org - Reflected XSS in Proforms Basic component for Joomla <= 1.6.0
A reflected XSS vulnerability was discovered in the Proforms Basic component for Joomla...
CVE-2023-40655 Extension - mooj.org - Reflected XSS in Proforms Basic component for Joomla <= 1.6.0
A reflected XSS vulnerability was discovered in the Proforms Basic component for Joomla...
CVE-2023-40630 Extension - joomcode.com - Unauthenticated LFI/SSRF in JCDashboards component for Joomla 1.0.0-1.1.30
Unauthenticated LFI/SSRF in JCDashboards component for Joomla...
CVE-2023-40630
CVE-2023-40630 affects the JCDashboards component for Joomla (versions 1.0.0–1.1.30 per CVE records). It describes unauthenticated Local File Inclusion (LFI) and Server-Side Request Forgery (SSRF). Root cause is an insecure handling in JCDashboards that permits LFI/SSRF without authentication. Im...
New Hacker Group 'GambleForce' Tageting APAC Firms Using SQL Injection Attacks
A previously unknown hacker outfit called GambleForce has been attributed to a series of SQL injection attacks against companies primarily in the Asia-Pacific APAC region since at least September 2023. "GambleForce uses a set of basic yet very effective techniques, including SQL injections and th...
PT-2023-27581 · Joomla · Easy Quick Contact
Name of the Vulnerable Software and Affected Versions: Easy Quick Contact module for Joomla affected versions not specified Description: A reflected XSS vulnerability was discovered in the Easy Quick Contact module for Joomla. Recommendations: At the moment, there is no information about a newer...
Joomla Security Breach
Joomla is an open source, cross-platform content management system CMS developed by the Open Source Matters team using PHP and MySQL. A security vulnerability exists in Joomla that originates from a reflected cross-site scripting vulnerability in the Proforms Basic component...
PT-2023-27550 · Joomla · Lms Lite
Name of the Vulnerable Software and Affected Versions: LMS Lite component for Joomla affected versions not specified Description: The issue concerns a SQLi vulnerability in the LMS Lite component for Joomla. There is also mention of a Denial of Service DoS issue, but details are limited. No...
Joomla Security Breach
Joomla is an open source, cross-platform content management system CMS developed by Open Source Matters team using PHP and MySQL. A security vulnerability exists in Joomla that stems from the presence of a Reflective Cross-Site Scripting XSS vulnerability...
PT-2023-27549 · Joomla · Extplorer
Name of the Vulnerable Software and Affected Versions: Extplorer component for Joomla affected versions not specified Description: A reflected XSS issue was discovered in the Extplorer component for Joomla. This issue allows for the execution of malicious scripts on the client-side, potentially...
Joomla Security Breach
Joomla is an open source, cross-platform content management system CMS developed by the Open Source Matters team using PHP and MySQL. A security vulnerability exists in Joomla, which originates from a reflected cross-site scripting vulnerability in the Extplorer component...
Joomla Security Breach
Joomla is an open source, cross-platform content management system CMS developed by the Open Source Matters team using PHP and MySQL. A security vulnerability exists in Joomla, which originates from a reflected cross-site scripting vulnerability in the Quickform component...
Joomla Security Breach
Joomla is an open source, cross-platform content management system CMS developed by the Open Source Matters team using PHP and MySQL. A security vulnerability exists in Joomla that originates from a reflected cross-site scripting vulnerability in the Easy Quick Contact module...