CVE-2020-15699

An issue was discovered in Joomla! through 3.9.19. Missing validation checks on the usergroups table object can result in a broken site configuration...

CVE-2020-15699

CVE-2020-15699 affects Joomla! up to version 3.9.19. The issue is missing validation checks on the usergroups table object, which can lead to a broken site configuration. Multiple connected sources (Red Hat, OSV, NVD, PT-Security, etc.) corroborate this description and reference Joomla! 3.9.20 as...

CVE-2020-15698

Summary: CVE-2020-15698 affects Joomla! up to version 3.9.19, where inadequate filtering on the system information screen can expose Redis or proxy credentials. The vulnerability is documented across multiple sources (NVD/Red Hat/OSV/NESSUS) with consistent description. What’s affected: Joomla! 3...

CVE-2020-15698

An issue was discovered in Joomla! through 3.9.19. Inadequate filtering on the system information screen could expose Redis or proxy credentials...

CVE-2020-15697

CVE-2020-15697 affects Joomla! up to version 3.9.19. The issue is that internal read-only fields in the User table class could be modified by users, enabling unauthorized modification of user data and impacting data integrity. The reliable sources in the connected documents corroborate this speci...

CVE-2020-15697

An issue was discovered in Joomla! through 3.9.19. Internal read-only fields in the User table class could be modified by users...

CVE-2020-15696

CVE-2020-15696 affects Joomla! up to 3.9.19, where lack of input filtering/escaping in the mod_random_image component allows Cross-Site Scripting (XSS). The vulnerability targets the link parameter handling, enabling attacker-controlled content to be executed in a victim’s browser. The issue is d...

CVE-2020-15696

An issue was discovered in Joomla! through 3.9.19. Lack of input filtering and escaping allows XSS attacks in modrandomimage...

CVE-2020-15695

CVE-2020-15695 affects Joomla! up to version 3.9.19. The issue is a missing token check in the remove request section of the com_privacy component, causing a CSRF vulnerability. The CVSS details indicate network access, no privileges required, user interaction required, and low impact across conf...

CVE-2020-15695

An issue was discovered in Joomla! through 3.9.19. A missing token check in the remove request section of comprivacy causes a CSRF vulnerability...

PT-2020-14593 · Joomla · Joomla!

Name of the Vulnerable Software and Affected Versions: Joomla! versions prior to 3.9.20 Description: An issue was discovered that could expose Redis or proxy credentials due to inadequate filtering on the system information screen. Recommendations: For versions prior to 3.9.20, update to version...

PT-2020-14594 · Open Source Matters · Joomla!

Name of the Vulnerable Software and Affected Versions: Joomla! versions prior to 3.9.20 Description: An issue was discovered in Joomla! where missing validation checks on the usergroups table object can result in a broken site configuration. Recommendations: For versions prior to 3.9.20, update t...

PT-2020-14590 · Open Source Matters · Joomla!

Name of the Vulnerable Software and Affected Versions: Joomla! versions 3.9.19 and earlier Description: A missing token check in the remove request section of com privacy causes a CSRF issue. Recommendations: For versions 3.9.19 and earlier, update to a version that includes the fix for the missi...

PT-2020-14595 · Open Source Matters · Joomla!

Name of the Vulnerable Software and Affected Versions: Joomla! versions prior to 3.9.20 Description: A missing token check in the "ajax install" endpoint of com installer causes a CSRF issue. Recommendations: For versions prior to 3.9.20, update to version 3.9.20 or later to resolve the issue...

PT-2020-14592 · Open Source Matters · Joomla!

Name of the Vulnerable Software and Affected Versions: Joomla! versions 3.9.19 and earlier Description: An issue was discovered where internal read-only fields in the User table class could be modified by users. Recommendations: For Joomla! versions 3.9.19 and earlier, update to a version that...

Joomla J2 JOBS 1.3.0 - (sortby) Authenticated SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! J2 JOBS 1.3.0 - 'sortby' Authenticated SQL Injection Exploit Author: Mehmet Kelepçe / Gais Cyber Security Vendor Homepage: https://joomsky.com/ Software Link: https://joomsky.com/products/js-jobs-pro.html Change Log Upda...

Joomla! J2 JOBS 1.3.0 - 'sortby' Authenticated SQL Injection

Exploit Title: Joomla! J2 JOBS 1.3.0 - 'sortby' Authenticated SQL Injection Date: 2020-06-17 Exploit Author: Mehmet Kelepçe / Gais Cyber Security Vendor Homepage: https://joomsky.com/ Software Link: https://joomsky.com/products/js-jobs-pro.html Change Log Update :...

PT-2020-14591 · Open Source Matters · Joomla!

Name of the Vulnerable Software and Affected Versions: Joomla! versions prior to 3.9.20 Description: An issue was discovered in Joomla! where lack of input filtering and escaping allows XSS attacks in mod random image. Recommendations: For versions prior to 3.9.20, update to version 3.9.20 or lat...

SQL injection vulnerability in the ph***_co*** parameter of the JEGallery component of Joomla!

Developed with PHP language and MySQL database, Joomla! is a content management system. A SQL injection vulnerability exists in the phco parameter of the Joomla! JEGallery component, which can be exploited by an attacker to obtain sensitive information from the database...

SQL injection vulnerability in the ci*** parameter of the JEGallery component of Joomla!

Developed with PHP language and MySQL database, Joomla! is a content management system. A SQL injection vulnerability exists in the ci parameter of the Joomla! JEGallery component, which can be exploited by attackers to obtain sensitive information from the database...