Information disclosure

Joomla! Core is prone to an information disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may help in launching further attacks. Joomla! Core versions 1.5.x ranging from 1.5.0 and up to and including 1.5.15 are vulnerable...

Privilege escalation

Joomla! Core is prone to a vulnerability that lets attackers upload arbitrary files because the application fails to properly verify user-supplied input. An attacker can exploit this vulnerability to upload arbitrary code and run it in the context of the webserver process. This may facilitate...

CVE-2010-1435

CVE-2010-1435 affects Joomla! Core 1.5.x (1.5.0 to 1.5.15). The vulnerability is a security bypass that could enable an attacker to perform restricted actions and, via a SQL injection vector that already exists in Joomla! Core, retrieve password reset tokens from the database. Connected sources c...

CVE-2010-1435

Joomla! Core is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently retrieve password reset tokens from the database through an already existing SQL injection vector. Joomla! Core versions 1.5.x ranging from...

CVE-2010-1434

Summary: CVE-2010-1434 affects Joomla! Core 1.5.x versions from 1.5.0 through 1.5.15, exposing a session-fixation vulnerability that could let an attacker hijack an arbitrary session and access sensitive information. The vulnerability is consistently described across multiple sources (NVD/Red Hat...

CVE-2010-1434

Joomla! Core is prone to a session fixation vulnerability. An attacker may leverage this issue to hijack an arbitrary session and gain access to sensitive information, which may help in launching further attacks. Joomla! Core versions 1.5.x ranging from 1.5.0 and up to and including 1.5.15 are...

CVE-2010-1433

Joomla! Core is prone to a vulnerability that lets attackers upload arbitrary files because the application fails to properly verify user-supplied input. An attacker can exploit this vulnerability to upload arbitrary code and run it in the context of the webserver process. This may facilitate...

CVE-2010-1433

CVE-2010-1433 affects Joomla! Core 1.5.x (1.5.0 to 1.5.15). The root cause is improper validation of user-supplied input, enabling an attacker to upload arbitrary files and potentially run code in the webserver process. This can lead to unauthorized access or privilege escalation; other attacks a...

CVE-2010-1432

Joomla! Core contains an information disclosure vulnerability affecting Joomla! Core 1.5.x, specifically versions 1.5.0–1.5.15. The issue allows an attacker to obtain sensitive information that could aid in further exploitation. Exploitation details, affected vectors, and remediation steps are no...

CVE-2010-1432

Joomla! Core is prone to an information disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may help in launching further attacks. Joomla! Core versions 1.5.x ranging from 1.5.0 and up to and including 1.5.15 are vulnerable...

Joomla 代码问题漏洞

Joomla is an open source, cross-platform content management system CMS developed using PHP and MySQL by the US-based Open Source Matters team. A security vulnerability exists in Joomla! Core versions 1.5.0 to 1.5.15, which originates from the program's inability to properly validate user-supplied...

Joomla 授权问题漏洞

Joomla is an open source, cross-platform content management system CMS developed using PHP and MySQL by the Open Source Matters team. A security vulnerability exists in Joomla! Core versions 1.5.0 through 1.5.15, which can be exploited by attackers to hijack arbitrary sessions and gain access to...

Joomla 信息泄露漏洞

Joomla is an open source, cross-platform content management system CMS developed using PHP and MySQL by the US-based Open Source Matters team. A security vulnerability exists in Joomla! Core versions 1.5.0 to 1.5.15, which can be exploited by attackers to obtain sensitive information...

Joomla 权限许可和访问控制问题漏洞

Joomla is an open source, cross-platform content management system CMS developed using PHP and MySQL by the U.S. Open Source Matters team. A vulnerability exists in Joomla! Core 1.5.15 and prior versions 1.5.x in regards to privilege permission and access control issues. The vulnerability arises...

JoomShaper SP Page Builder Lite suffers from a SQL Injection Vulnerability

SP Page Builder is a free page builder component that users can use to design and edit website page content on joomla sites. JoomShaper SP Page Builder Lite suffers from a SQL injection vulnerability that can be exploited by an attacker to obtain sensitive database information...

Joomla 存储型XSS漏洞(CVE-2021-26032)

JOOMLA PASSWORD RESET VULNERABILITY AND A STORED XSS FOR FULL COMPROMISE Intro Joomla is one of the most popular CMS-es with over 1.5 million installations world-wide. We pentested Joomla 3.9.24 and found a password reset vulnerability which we chained with a set of vulnerabilities and features t...

CMSmap

This is an open-source Python tool called CMSmap, designed to automate the process of detecting security flaws in popular Content Management Systems CMSs such as WordPress, Joomla, Drupal, and Moodle. The tool is still in its early stages and may contain bugs or flaws. The primary purpose of CMSm...

Joomla! cross-site scripting vulnerability (CNVD-2021-38294)

Joomla! is a globally recognized content management system developed using the PHP language coupled with a MySQL database that can be implemented on various platforms such as Linux, Windows, MacOSX, and many others. A cross-site scripting vulnerability exists in Joomla! versions 3.0.0 through...

Joomla! 3.0.0 - 3.9.26 Multiple Vulnerabilities

Joomla! is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:joomla:joomla"; ifdescription...

Arbitrary File Deletion Vulnerability in Joomla!

SP Page Builder plugin is a free page builder component that users can use on joomla sites to design and edit site page content. An arbitrary file deletion vulnerability exists in Joomla! SP Page Builder, which can be exploited to delete arbitrary files on the target server...