19203 matches found
Joomla com_booking component 2.4.9 - Information Leak (Account enumeration) Exploit
Exploit Title: Joomla! combooking component 2.4.9 - Information Leak Account enumeration Google Dork: inurl:"index.php?option=combooking" Exploit Author: qw3rTyTy Vendor Homepage: http://www.artio.net/ Software Link: http://www.artio.net/downloads/joomla/book-it/book-it-2-free/download Version:...
Joomla! com_booking component 2.4.9 - Information Leak (Account enumeration)
Exploit Title: Joomla! combooking component 2.4.9 - Information Leak Account enumeration Google Dork: inurl:"index.php?option=combooking" Date: 07/12/2023 Exploit Author: qw3rTyTy Vendor Homepage: http://www.artio.net/ Software Link:...
[20231101] - Core - Exposure of environment variables
The language file parsing process could be manipulated to expose environment variables. Environment variables might contain sensible information...
CVE-2023-23756
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in advcomsys.com oneVote component for Joomla. It allows XSS Targeting Non-Script Elements...
CVE-2023-23756
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in advcomsys.com oneVote component for Joomla. It allows XSS Targeting Non-Script Elements...
Cross site scripting
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in advcomsys.com oneVote component for Joomla. It allows XSS Targeting Non-Script Elements...
CVE-2023-23756 Extension - advcomsys.com - XSS in oneVote component for Joomla <= 1.7.0
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in advcomsys.com oneVote component for Joomla. It allows XSS Targeting Non-Script Elements...
CVE-2023-23756 Extension - advcomsys.com - XSS in oneVote component for Joomla <= 1.7.0
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in advcomsys.com oneVote component for Joomla. It allows XSS Targeting Non-Script Elements...
CVE-2023-23756
CVE-2023-23756 affects the Joomla oneVote component from advcomsys.com, specifically versions
Joomla 跨站脚本漏洞
Joomla! is a set of forum components used in the Joomla! content management system. A security vulnerability exists in Joomla! that stems from a cross-site scripting vulnerability...
PT-2023-19180 · Joomla · Onevote
Name of the Vulnerable Software and Affected Versions: oneVote component for Joomla affected versions not specified Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. It affects the oneVote component for Joomla,...
Virtual Classroom, , SQL Injection
Developer release blog https://blog.braincert.com/virtual-classroom-security-release-elevate-your-online-learning-on-wordpress-and-joomla/...
Vulnerabilities fixed in Joomla!
Joomla! has fixed vulnerabilities in the MultiFactor Authentication system of Joomla! CMS. An unauthenticated malicious party could exploit the vulnerabilities to launch a Cross-Site-Scripting XSS attack, or to use brute force to access the account. forcing to gain access to a user's account and...
HikaShop Joomla Plugin, , SQL Injection
anyone with access to the order management in the backend of HikaShop to be able to use a MySQL injection to extract data from the database. "payment methods" restriction setting to custom fields of the "order" table in HikaShop 4.4.1, so prior versions of HikaShop are not impacted...
Joomla! 4.2.x < 4.3.2 Multiple Vulnerabilities
According to its self-reported version, the instance of Joomla! running on the remote web server is 4.2.x prior to 4.3.2. It is, therefore, affected by multiple vulnerabilities. - An open redirect and a Cross-Site Scripting XSS within the mfa selection. CVE-2023-23754 - A lack of rate limiting...
Joomla! < 2.5.4 Multiple Vulnerabilities
According to its self-reported version number, the detected Joomla! application is affected by multiple vulnerabilities : - Creating an administrator account - Unauthorized password change Note that the scanner has not tested for these issues but has instead relied only on the application's...
Joomla! 1.7.1 Multiple Vulnerabilities
According to its self-reported version number, the detected Joomla! application is affected by multiple vulnerabilities : - Information disclosure due to inadequate error checking - Information disclosure due to weak encryption Note that the scanner has not tested for these issues but has instead...
Joomla! 1.5.x < 1.5.16 Multiples Vulnerabilities
According to its self-reported version number, the detected Joomla! application is affected by multiple vulnerabilities : - A security bypass that may allow attackers to perform otherwise restricted actions - A session fixation an attacker may leverage this issue to hijack an arbitrary session an...
Joomla! 1.6.0 SQL Injection
According to its self-reported version, the detected Joomla! application version is 1.6.0 and is affected by an SQL Injection via the filterorder and filerorderDir parameters. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported...