CVE-2023-39970 Extension - acymailing.com - RCE in AcyMailing component for Joomla 6.7.0-8.5.0

Unrestricted Upload of File with Dangerous Type vulnerability in AcyMailing component for Joomla. It allows remote code execution...

CVE-2023-39970 Extension - acymailing.com - RCE in AcyMailing component for Joomla 6.7.0-8.5.0

Unrestricted Upload of File with Dangerous Type vulnerability in AcyMailing component for Joomla. It allows remote code execution...

CVE-2023-39970

CVE-2023-39970 affects the AcyMailing Joomla extension. The issue is an Unrestricted Upload of File with Dangerous Type that allows remote code execution. Public records in the CVE entries indicate impact on AcyMailing versions 6.7.0–8.5.0 (per CVE-List entry). The provided documents consistently...

AcyMailing Joomla Component 跨站脚本漏洞

AcyMailing Joomla Component is an email marketing component used in the Joomla content management system. A security vulnerability exists in AcyMailing Joomla Component that stems from improper input neutralization and allows cross-site scripting XSS...

PT-2023-27185 · Joomla · Acymailing Enterprise

Name of the Vulnerable Software and Affected Versions: AcyMailing Enterprise component for Joomla affected versions not specified Description: The issue is related to an Improper Access Control vulnerability in the AcyMailing Enterprise component for Joomla. It allows unauthorized removal of...

AcyMailing Joomla Component 安全漏洞

AcyMailing Joomla Component is an email marketing component used in the Joomla content management system. A security vulnerability exists in AcyMailing Joomla Component that stems from the presence of incorrect access control that allows unauthorized removal of attachments from campaigns...

PT-2023-27183 · Joomla · Acymailing Enterprise

Name of the Vulnerable Software and Affected Versions: AcyMailing Enterprise component for Joomla versions 6.7.0 through 8.6.3 Description: The issue is related to improper neutralization of input during web page generation, allowing Cross-Site Scripting XSS. This enables potential attackers to...

AcyMailing Joomla Component 代码问题漏洞

AcyMailing Joomla Component is an email marketing component used in the Joomla content management system. A security vulnerability exists in AcyMailing Joomla Component that stems from the unrestricted upload of dangerous types of files that allow remote code execution...

AcyMailing Joomla Component 访问控制错误漏洞

AcyMailing Joomla Component is an email marketing component used in the Joomla content management system. An Access Control Error vulnerability exists in AcyMailing Joomla Component, which stems from the presence of incorrect access control that allows unauthorized users to create new mailing lis...

PT-2023-27186 · Joomla · Acymailing Enterprise

Name of the Vulnerable Software and Affected Versions: AcyMailing Enterprise component for Joomla affected versions not specified Description: The issue allows unauthorized actors to obtain the number of subscribers in a specific list, exposing sensitive information. Recommendations: At the momen...

AcyMailing Joomla Component 安全漏洞

AcyMailing Joomla Component is an email marketing component used in the Joomla content management system. A security vulnerability exists in AcyMailing Joomla Component that stems from the presence of a sensitive information disclosure that allows an unauthorized participant to obtain the number ...

CVE-2023-38045

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in advcomsys.com oneVote component for Joomla. It allows XSS Targeting Non-Script Elements...

CVE-2023-38045

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in advcomsys.com oneVote component for Joomla. It allows XSS Targeting Non-Script Elements...

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in advcomsys.com oneVote component for Joomla. It allows XSS Targeting Non-Script Elements...

CVE-2023-23758 Extension - creative-solutions.net - SQLi in Creative Gallery component for Joomla <= 2.2.0

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability allows SQL Injection...

CVE-2023-38044 Extension - hikashop.com - SQLi in HikaShop component for Joomla <= 4.7.2

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability allows SQL Injection...

CVE-2023-23758 Extension - creative-solutions.net - SQLi in Creative Gallery component for Joomla <= 2.2.0

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability allows SQL Injection...

CVE-2023-38045

The CVE-2023-38045 entry concerns an XSS vulnerability in the Joomla extension: oneVote component by advcomsys.com. The root cause is improper neutralization of input during web page generation, allowing cross-site scripting and targeting non-script elements. Affected software is the oneVote comp...

CVE-2023-38045 Extension - admiror-design-studio.com - XSS in Admiror Gallery component for Joomla 5.0.0-5.2.0

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in advcomsys.com oneVote component for Joomla. It allows XSS Targeting Non-Script Elements...

CVE-2023-38045 Extension - admiror-design-studio.com - XSS in Admiror Gallery component for Joomla 5.0.0-5.2.0

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in advcomsys.com oneVote component for Joomla. It allows XSS Targeting Non-Script Elements...