CVE-2022-23802

Joomla Guru extension 5.2.5 is affected by: Insecure Permissions. The impact is: obtain sensitive information remote. The component is: Access to private information and components, possibility to view other users' information. Information disclosure Access to private information and components,...

CVE-2022-23802

Joomla Guru extension 5.2.5 is affected by: Insecure Permissions. The impact is: obtain sensitive information remote. The component is: Access to private information and components, possibility to view other users' information. Information disclosure Access to private information and components,...

CVE-2022-27909

In Joomla component 'jDownloads 3.9.8.2 Stable' the remote user can change some parameters in the address bar and see the names of other users' files...

Design/Logic Flaw

In Joomla component 'jDownloads 3.9.8.2 Stable' the remote user can change some parameters in the address bar and see the names of other users' files...

Information disclosure

Joomla Guru extension 5.2.5 is affected by: Insecure Permissions. The impact is: obtain sensitive information remote. The component is: Access to private information and components, possibility to view other users' information. Information disclosure Access to private information and components,...

CVE-2022-27909

In Joomla component 'jDownloads 3.9.8.2 Stable' the remote user can change some parameters in the address bar and see the names of other users' files...

CVE-2022-23802

Joomla Guru extension 5.2.5 is affected by: Insecure Permissions. The impact is: obtain sensitive information remote. The component is: Access to private information and components, possibility to view other users' information. Information disclosure Access to private information and components,...

CVE-2022-27909

The CVE-2022-27909 entry affects Joomla component jDownloads 3.9.8.2 Stable . The vulnerability is an improper access control flaw allowing a remote user to modify parameters in the address bar and view the names of other users’ files, i.e., a confidentiality impact. NVD reports CVSS v3.1 base sc...

CVE-2022-27909 Extension - Incorrect Access Control within jdownloads extension

In Joomla component 'jDownloads 3.9.8.2 Stable' the remote user can change some parameters in the address bar and see the names of other users' files...

CVE-2022-23802

CVE-2022-23802 affects Joomla Guru extension version 5.2.5. The root issue is insecure permissions that allow remote access to private information and viewing other users’ data, leading to information disclosure. Documented impact is information disclosure with remote exposure; there is no explic...

CVE-2022-23802 Extension - Insecure Permissions within Joomla Guru extensions

Joomla Guru extension 5.2.5 is affected by: Insecure Permissions. The impact is: obtain sensitive information remote. The component is: Access to private information and components, possibility to view other users' information. Information disclosure Access to private information and components,...

PT-2022-16274 · Unknown · Joomla Guru Extension

Name of the Vulnerable Software and Affected Versions: Joomla Guru extension version 5.2.5 Description: The issue allows for the obtainment of sensitive information remotely due to insecure permissions. This affects access to private information and components, making it possible to view other...

iJoomla Guru 安全漏洞

Guru is a Joomla! extension for iJoomla for creating online courses, universities or schools. A security vulnerability exists in iJoomla Guru version 5.2.5. An attacker exploited the vulnerability to remotely obtain sensitive information...

jDownloads 安全漏洞

jDownloads is a Joomla! extension for jDownloads to manage downloads. A security vulnerability exists in jDownloads version 3.9.8.2. An attacker can exploit the vulnerability to change some parameters in the address bar and view the names of other users' files...

GHSA-9QR2-FX2G-PFVH Joomla! Open Redirect vulnerability

Multiple open redirect vulnerabilities in Joomla! 1.5 before 1.5.7 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a "passed in" URL...

Joomla! Open Redirect vulnerability

Multiple open redirect vulnerabilities in Joomla! 1.5 before 1.5.7 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a "passed in" URL...

GHSA-GM5Q-2CX5-WR2J Joomla! Open Redirect vulnerability

Unspecified vulnerability in Joomla! before 1.5.4 has unknown impact and attack vectors related to a "User Redirect Spam fix," possibly an open redirect vulnerability...

Joomla! Open Redirect vulnerability

Unspecified vulnerability in Joomla! before 1.5.4 has unknown impact and attack vectors related to a "User Redirect Spam fix," possibly an open redirect vulnerability...

Joomla! doesn't configure .htaccess to apply certain security checks that "block common exploits" to SEF URLs

Joomla! before 1.5.4 does not configure .htaccess to apply certain security checks that "block common exploits" to SEF URLs, which has unknown impact and remote attack vectors...

GHSA-MXR8-PCPG-M23J Joomla! doesn't configure .htaccess to apply certain security checks that "block common exploits" to SEF URLs

Joomla! before 1.5.4 does not configure .htaccess to apply certain security checks that "block common exploits" to SEF URLs, which has unknown impact and remote attack vectors...