Joomla Resources Directory (JRD) Portal Suffers Data Breach

Joomla, one of the most popular Open-source content management systems CMS, last week announced a new data breach impacting 2,700 users who have an account with its resources directory JRD website, i.e., resources.joomla.org. The breach exposed affected users' personal information, such as full...

Joomla SimpleCalendar Component SQL Injection (CVE-2018-5974)

A vulnerability exists in Albonico Simplecalendar. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Joomla XCloner Backup 3.5.3 - Local File Disclosure

Joomla XCloner Backup version 3.5.3 suffers from a local file disclosure vulnerability. Exploit Title: Joomla XCloner Backup - Authenticated Local File Disclosure Date: 10.05.2020 Exploit Author: Mehmet Kelepçe / Gais Cyber Security Exploit-Db Author ID: 8763 Reference:...

Exploit for Improper Input Validation in Joomla Joomla\!

CMS-Hunter 简介 Content Management System Vulnerability Hunter 说明：目前来看，本项目会进行长期维护，有修改的建议或者想法欢迎联系作者。 CMS 漏洞列表 Discuz - Discuz＜3.4birthprovince前台任意文件删除 DedeCMS - DedeCMSv5.7shopsdelivery存储型XSS - DedeCMSv5.7carbuyaction存储型XSS - DedeCMSv5.7友情链接CSRFGetShell - DedeCMS V5.7 SP2后台存在代码执行漏洞 Drupal -...

Joomla XCloner Backup 3.5.3 Local File Disclosure

Exploit Title: Joomla XCloner Backup - Authenticated Local File Disclosure Date: 10.05.2020 Exploit Author: Mehmet Kelepçe / Gais Cyber Security Exploit-Db Author ID: 8763 Reference: https://www.xcloner.com/xcloner-news/security-release-available-for-archived-joomla-version/ Vendor Homepage:...

Joomla! Plugin XCloner Backup 3.5.3 - Local File Inclusion (Authenticated)

Exploit Title: Joomla! Plugin XCloner Backup 3.5.3 - Local File Inclusion Authenticated Date: 2020-05-10 Exploit Author: Mehmet Kelepçe / Gais Cyber Security Exploit-Db Author ID: 8763 Reference: https://www.xcloner.com/xcloner-news/security-release-available-for-archived-joomla-version/ Vendor...

Joomla XCloner Backup 3.5.3 Plugin - Local File Inclusion (Authenticated) Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Plugin XCloner Backup 3.5.3 - Local File Inclusion Authenticated Exploit Author: Mehmet Kelepçe / Gais Cyber Security Exploit-Db Author ID: 8763 Reference:...

xcloner,3.53,Other

xcloner,3.53,Other Developer statement Today we have made available a new release — version 3.5.4 — for the unmaintained Joomla version of XCloner. Prior versions of XCloner for Joomla contained an Authenticated Local File Disclosure vulnerability that has been patched in the latest version. Any...

Joomla! XCloner Component Information Disclosure Vulnerability

Joomla! is an open source, cross-platform content management system CMS developed using PHP and MySQL. xCloner is used in one of the website backup and restore components. A security vulnerability exists in the XCloner component of Joomla! An attacker can exploit this vulnerability to obtain loca...

CVE-2020-13424

The XCloner component before 3.5.4 for Joomla! allows Authenticated Local File Disclosure...

CVE-2020-13424

The XCloner component before 3.5.4 for Joomla! allows Authenticated Local File Disclosure...

Arbitrary file deletion

The XCloner component before 3.5.4 for Joomla! allows Authenticated Local File Disclosure...

CVE-2020-13424

CVE-2020-13424 affects the Joomla! XCloner component, prior to 3.5.4. The vulnerability is an authenticated local file disclosure via a path traversal in the download functionality of the XClonerBackup component (case 'download'), where the parameter file is used to read arbitrary server files (e...

CVE-2020-13424

The XCloner component before 3.5.4 for Joomla! allows Authenticated Local File Disclosure...

Component prayercenter 'id' SQL Injection Vulnerability in Joomla!

Joomla! is an open source content management system CMS that provides RSS feeds, site search, etc. PrayerCenter is used in one of the prayer sharing components. A SQL injection vulnerability exists in the prayercenter 'id' component of Joomla! An attacker can exploit the vulnerability to obtain...

Component com_hotel cross-site scripting vulnerability in Joomla!

Joomla! is an open source, cross-platform content management system CMS developed using PHP and MySQL. A cross-site scripting vulnerability exists in the Joomla! component comhotel. An attacker can exploit the vulnerability to obtain sensitive information such as user cookies...

SQL injection vulnerability in the la***_ty*** parameter of the ordasoft-cck component of Joomla!

Developed with PHP language and MySQL database, Joomla! is a content management system. A SQL injection vulnerability exists in the laty parameter of the Joomla! ordasoft-cck component. An attacker can exploit this vulnerability to obtain sensitive database information...

SQL injection vulnerability in the co*** parameter of the ordasoft-cck component of Joomla!

Developed with PHP language and MySQL database, Joomla! is a content management system. A SQL injection vulnerability exists in the co parameter of the Joomla! ordasoft-cck component. An attacker can exploit this vulnerability to obtain sensitive database information...

Arbitrary File Upload Vulnerability in Joomla! ordasoft-cck Component

Developed with PHP language and MySQL database, Joomla! is a content management system. An arbitrary file upload vulnerability exists in the Joomla! ordasoft-cck component. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...

SQL Injection Vulnerability in Us*** Parameters of Joomla! ordasoft-cck Component

Developed with PHP language and MySQL database, Joomla! is a content management system. A SQL injection vulnerability exists in the Us parameter of the Joomla! ordasoft-cck component, which can be exploited by an attacker to obtain sensitive information about a database...