19238 matches found
Joomla! 安全漏洞
Joomla! is a globally recognized content management system developed using the PHP language coupled with a MySQL database that can be implemented on various platforms such as Linux, Windows, MacOSX, and many others. An information disclosure vulnerability exists in Joomla! 2.5.0 - 3.9.22. The...
Joomla! 信息泄露漏洞
Joomla! is a globally recognized content management system developed using the PHP language coupled with a MySQL database that can be implemented on various platforms such as Linux, Windows, MacOSX, and many others. A user enumeration vulnerability exists in the back-end login page of Joomla!...
PT-2020-17365 · Joomla · Joomla!
Name of the Vulnerable Software and Affected Versions: Joomla! versions 3.0.0 through 3.9.22 Description: An issue was discovered that leads to a SQL injection vulnerability in the backend user list due to improper filter blacklist configuration. Recommendations: For Joomla! versions 3.0.0 throug...
PT-2020-17364 · Joomla · Joomla!
Name of the Vulnerable Software and Affected Versions: Joomla! versions 2.5.0 through 3.9.22 Description: An issue was discovered in the folder parameter of mod random image, which lacked input validation, leading to a path traversal vulnerability. Recommendations: For Joomla! versions 2.5.0...
PT-2020-17368 · Open Source Matters · Joomla!
Name of the Vulnerable Software and Affected Versions: Joomla! versions 1.7.0 through 3.9.22 Description: An issue was discovered in Joomla! due to a lack of input validation while handling ACL rulesets, which can cause write ACL violations. Recommendations: For versions 1.7.0 through 3.9.22,...
Joomla! Remote Code Execution (CVE-2020-10238; CVE-2020-10239; CVE-2021-23132)
A remote code execution vulnerability exists in Joomla!. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Joomla! Component GMapFP 3.5 - Unauthenticated Arbitrary File Upload
Exploit Title: Joomla! Component GMapFP 3.5 - Unauthenticated Arbitrary File Upload Google Dork: inurl:''comgmapfp'' Date: 2020-03-27 Exploit Author: ThelastVvV Vendor Homepage: https://gmapfp.org/ Version:Version J3.5 /J3.5free Tested on: Ubuntu CVE: CVE-2020-23972 Description: An attacker can...
Joomla 1.7.x < 3.9.23 Multiple Vulnerabilities (5828-joomla-3-9-23)
According to its self-reported version, the instance of Joomla! running on the remote web server is 1.7.x prior to 3.9.23. It is, therefore, affected by multiple vulnerabilities. - The autosuggestion feature of comfinder did not respect the access level of the corresponding terms. - The global...
Vulnerabilities fixed in Joomla!
Vulnerabilities have been fixed in Joomla! The vulnerabilities allow a malicious person to launch attacks that lead to the following categories of damage: Cross-Site Request Forgery XSRF. Security measure circumvention SQL Injection Accessing sensitive data Accessing system data Joomla! provides...
Joomla Publisher Component Persistent Cross-Site Scripting
A cross-site scripting vulnerability exists in Joomla Publisher Component. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...
Joomla Plugin Simple Image Gallery Extended (SIGE) 3.5.3 - Multiple Vulnerabilities
Exploit Title: Joomla Plugin Simple Image Gallery Extended SIGE 3.5.3 - Multiple Vulnerabilities Exploit Author: Vulnerability-Lab Date: 2020-11-11 Vendor Homepage: https://kubik-rubik.de/sige-simple-image-gallery-extended Software Link: https://kubik-rubik.de/sige-simple-image-gallery-extended...
SIGE 3.4.1 / 3.5.3 Pro Cross Site Scripting / Remote File Inclusion
Document Title: =============== SIGE Joomla 3.4.1 & 3.5.3 Pro - Multiple Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2265 Release Date: ============= 2020-11-11 Vulnerability Laboratory ID VL-ID: ====================================...
Joomla GMapFP Component Arbitrary File Upload (CVE-2020-23972)
An arbitrary file upload vulnerability exists in Joomla GMapFP Component. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Nugmubs ChronoForms Cross-Site Scripting Vulnerability
Nugmubs ChronoForms is a plugin from the individual developers of Nugmubs for providing discussion functionality to Joomla. A cross-site scripting vulnerability exists in Nugmubs ChronoForms version 2.0.11, which originates when inserting a crafted payload into a post. If any user sees the post,...
Joomla Remote Code Execution (CVE-2020-11890)
A remote code execution vulnerability exists in Joomla. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
SIGE (Joomla) 3.4.1 & 3.5.3 Pro - Multiple Vulnerabilities
Document Title: =============== SIGE Joomla 3.4.1 & 3.5.3 Pro - Multiple Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2265 Release Date: ============= 2020-11-11 Vulnerability Laboratory ID VL-ID: ====================================...
Joomla SIGE 3.4.1-FREE / 3.5.3-PRO RFI / Cross Site Scripting
Title: SIGE - Simple Image Gallery Extended joomla extension 3.4.1-FREE / 3.5.3-PRO - Multi Vulnerability Remote File Inclusion RFI & Cross Site Scripting XSS date: 2020-11-11 Vendor Homepage: https://kubik-rubik.de/ Software Link: https://kubik-rubik.de/sige-simple-image-gallery-extended Softwar...
Joomla! JVTwitter SQL Injection Vulnerability
Developed by PHP language and MySQL database, Joomla! is a content management system Content Management System, CMS. A SQL injection vulnerability exists in Joomla! The vulnerability stems from a database application that lacks validation of externally entered SQL statements. An attacker can...
