19238 matches found
CVE-2020-19451
SQL injection exists in the jdownloads 3.2.63 component for Joomla! via comjdownloads/helpers/jdownloadshelper.php, updateLog function via the X-forwarded-for Header parameter...
CVE-2020-19450
CVE-2020-19450 affects Joomla! jdownloads 3.2.63. The vulnerability is a SQL injection in com_jdownloads/helpers/jdownloadshelper.php, in the getUserLimits function via the list parameter, caused by unsafe handling of user input. Impact is indicated as partial confidentiality compromise per CVSS2...
CVE-2020-19450
SQL injection exists in the jdownloads 3.2.63 component for Joomla! via comjdownloads/helpers/jdownloadshelper.php, getUserLimits function in the list parameter...
CVE-2020-19447
SQL injection exists in the jdownloads 3.2.63 component for Joomla! comjdownloads/models/send.php via the fmarkedfilesid parameter...
CVE-2020-19447
SQL injection exists in the jdownloads 3.2.63 component for Joomla! comjdownloads/models/send.php via the fmarkedfilesid parameter...
Sql injection
SQL injection exists in the jdownloads 3.2.63 component for Joomla! comjdownloads/models/send.php via the fmarkedfilesid parameter...
CVE-2020-19447
CVE-2020-19447 : The Joomla! ecosystem component jdownloads version 3.2.63 contains an SQL injection vulnerability in the com_jdownloads model file send.php, exploitable via the f_marked_files_id parameter. This description is sourced from multiple entries (NVD/Red Hat/CVE List) and confirms the ...
CVE-2020-19447
SQL injection exists in the jdownloads 3.2.63 component for Joomla! comjdownloads/models/send.php via the fmarkedfilesid parameter...
CVE-2020-25751
The paGO Commerce plugin 2.5.9.0 for Joomla! allows SQL Injection via the administrator/index.php?option=compago&view=comments filterpublished parameter...
CVE-2020-25751
The paGO Commerce plugin 2.5.9.0 for Joomla! allows SQL Injection via the administrator/index.php?option=compago&view=comments filterpublished parameter...
Sql injection
The paGO Commerce plugin 2.5.9.0 for Joomla! allows SQL Injection via the administrator/index.php?option=compago&view=comments filterpublished parameter...
CVE-2020-25751
The paGO Commerce plugin 2.5.9.0 for Joomla! allows SQL Injection via the administrator/index.php?option=compago&view=comments filterpublished parameter...
CVE-2020-25751
CVE-2020-25751 affects the paGO Commerce plugin 2.5.9.0 for Joomla!, enabling SQL Injection via the URL parameter administrator/index.php?option=com_pago&view=comments filter_published. NVD lists CVSS v3.1 base score 8.8 (HIGH) with NETWORK attack, LOW privileges, and no user interaction; impacts...
Joomla! paGO Commerce SQL Injection Vulnerability
Joomla! is an open source, cross-platform content management system CMS developed using PHP and MySQL. A SQL injection vulnerability exists in Joomla! paGO Commerce. An attacker can exploit the vulnerability to obtain sensitive database information...
Joomla! paGO Commerce 2.5.9.0 - SQL Injection (Authenticated)
Exploit Title: Joomla! paGO Commerce 2.5.9.0 - SQL Injection Authenticated Date: 2020-08-21 Exploit Author: Mehmet Kelepçe / Gais Cyber Security Author ID: 8763 Vendor Homepage: https://www.corephp.com/ Software Link: https://www.corephp.com/joomla-products/pago-commerce Version: 2.5.9.0 Tested o...
Joomla! paGO Commerce 2.5.9.0 SQL Injection
Exploit Title: Joomla! paGO Commerce 2.5.9.0 - SQL Injection Authenticated Date: 2020-08-21 Exploit Author: Mehmet Kelepçe / Gais Cyber Security Author ID: 8763 Vendor Homepage: https://www.corephp.com/ Software Link: https://www.corephp.com/joomla-products/pago-commerce Version: 2.5.9.0 Tested o...
Exploit for Improper Input Validation in Joomla Joomla\!
CMS-Hunter 简介 Content Management System Vulnerability Hunter 说明：目前来看，本项目会进行长期维护，有修改的建议或者想法欢迎联系作者。 CMS 漏洞列表 Discuz - Discuz＜3.4birthprovince前台任意文件删除 DedeCMS - DedeCMSv5.7shopsdelivery存储型XSS - DedeCMSv5.7carbuyaction存储型XSS - DedeCMSv5.7友情链接CSRFGetShell - DedeCMS V5.7 SP2后台存在代码执行漏洞 Drupal -...
Component GMapFP Unauthenticated Arbitrary File Upload Vulnerability in Joomla!
Joomla! is an open source content management system CMS. A security vulnerability exists in the Joomla! component GMapFP. An attacker can exploit the vulnerability to access the application's upload functionality, upload files without authenticating the application, and bypass the issue by changi...
Joomla! 2.5.x < 3.9.21 Multiple Vulnerabilities
According to its self-reported version, the instance of Joomla! running on the remote web server is 2.5.x prior to 3.9.21. It is, therefore, affected by multiple vulnerabilities. - Lack of escaping in modlatestactions allows Cross-Site Scripting XSS attacks. CVE-2020-24599 - Lack of input...
