19241 matches found
Input validation
An issue was discovered in Joomla! before 3.9.17. Improper input validations in the usergroup table class could lead to a broken ACL configuration...
CVE-2020-11891
An issue was discovered in Joomla! before 3.9.17. Incorrect ACL checks in the access level section of comusers allow the unauthorized editing of usergroups...
CVE-2020-11891
Joomla! prior to 3.9.17 contains an ACL misconfiguration in the com_users access level editing function, allowing unauthorized editing of user groups. This CVE (CVE-2020-11891) is consistently described across multiple sources (Red Hat, OSV, NVD, CNVD, OpenVAS, etc.) with the same root cause: inc...
CVE-2020-11889
CVE-2020-11889 : Joomla! before 3.9.17 has an ACL check flaw in the com_users access level section that allows unauthorized deletion of usergroups due to incorrect access-control checks. Affected product is Joomla! (CMS). The connected documents confirm the root cause and impact but do not includ...
CVE-2020-11889
An issue was discovered in Joomla! before 3.9.17. Incorrect ACL checks in the access level section of comusers allow the unauthorized deletion of usergroups...
CVE-2020-11890
An issue was discovered in Joomla! before 3.9.17. Improper input validations in the usergroup table class could lead to a broken ACL configuration...
CVE-2020-11890
Joomla! core before 3.9.17 contains an input validation issue in the usergroup table class that can lead to a broken ACL configuration. Affected component: Joomla! usergroup handling. Impact: improper ACL configuration (highly likely misconfigurations of access control). Root cause: insufficient ...
PT-2020-12924 · Open Source Matters · Joomla!
Name of the Vulnerable Software and Affected Versions: Joomla! versions prior to 3.9.17 Description: An issue was discovered that allows unauthorized editing of usergroups due to incorrect ACL checks in the access level section of com users. Recommendations: For versions prior to 3.9.17, update t...
PT-2020-12923 · Open Source Matters · Joomla!
Name of the Vulnerable Software and Affected Versions: Joomla! versions prior to 3.9.17 Description: An issue was discovered in the usergroup table class due to improper input validations, which could lead to a broken ACL configuration. Recommendations: For versions prior to 3.9.17, update to...
PT-2020-12922 · Open Source Matters · Joomla!
Name of the Vulnerable Software and Affected Versions: Joomla! versions prior to 3.9.17 Description: An issue was discovered that allows unauthorized deletion of usergroups due to incorrect ACL checks in the access level section of com users. Recommendations: For versions prior to 3.9.17, update ...
SQL Injection Vulnerability in Joomla! simpleMembership Component
Joomla! simpleMembership is a flexible, simple tool for managing memberships and subscriptions. An SQL injection vulnerability exists in the Joomla! simpleMembership component, which can be exploited by an attacker to obtain sensitive information about a database...
Cross-site scripting vulnerability in Joomla! simpleMembership component
Joomla! is an open source content management system CMS, the system provides RSS feeds, site search and other functions. A cross-site scripting vulnerability exists in the Joomla! simpleMembership component. An attacker can insert malicious js code into the page to obtain user cookies and other...
File upload vulnerability in Joomla! simpleMembership component
Joomla! is an open source content management system CMS, the system provides RSS feeds, site search and other functions. A file upload vulnerability exists in the Joomla! simpleMembership component. An attacker can exploit the vulnerability to upload malicious files and gain server privileges...
SQL Injection Vulnerability in Joomla! Yendif Video Share Component
Joomla! is an open source content management system CMS , the system provides RSS feeds , site search and other features . Yendif Video Share is a component used to add video screens and image content to Joomla. A SQL injection vulnerability exists in the Yendif Video Share component of Joomla! A...
Joomla! plugin "AcyMailing" vulnerable to arbitrary file uploads
Overview Joomla! plugin "AcyMailing" allows an unauthenticated user to upload arbitrary files CWE-434. qw3rTyTy reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact Arbitrary PHP code may be executed. Solution...
JVN#56890693: Joomla! plugin "AcyMailing" vulnerable to arbitrary file uploads
Joomla! plugin "AcyMailing" allows an unauthenticated user to upload arbitrary files CWE-434. Impact Arbitrary PHP code may be executed. Solution Update the plugin Update the plugin according to the information provided by the developer. Products Affected AcyMailing versions prior to 6.9.2...
Joomla! com_fabrik Directory Traversal Vulnerability
Joomla! is an open source content management system CMS. A security vulnerability exists in Joomla! comfabrik. An attacker can exploit the vulnerability to obtain sensitive information...
Joomla! com_fabrik 3.9.11 - Directory Traversal
Exploit Title: Joomla! comfabrik 3.9.11 - Directory Traversal Google Dork: inurl:"index.php?option=comfabrik" Date: 2020-03-30 Exploit Author: qw3rTyTy Vendor Homepage: https://fabrikar.com/ Software Link: https://fabrikar.com/downloads Version: 3.9 Tested on: Debian/Nginx/Joomla! 3.9.11...
Joomla com_fabrik 3.9.11 - Directory Traversal Vulnerability
Exploit for php platform in category web applications Exploit Title: Joomla! comfabrik 3.9.11 - Directory Traversal Google Dork: inurl:"index.php?option=comfabrik" Exploit Author: qw3rTyTy Vendor Homepage: https://fabrikar.com/ Software Link: https://fabrikar.com/downloads Version: 3.9 Tested on:...
Joomla! com_fabrik 3.9.11 - Directory Traversal
Joomla! comfabrik 3.9.11 - Directory Traversal Exploit Title: Joomla! comfabrik 3.9.11 - Directory Traversal Google Dork: inurl:"index.php?option=comfabrik" Date: 2020-03-30 Exploit Author: qw3rTyTy Vendor Homepage: https://fabrikar.com/ Software Link: https://fabrikar.com/downloads Version: 3.9...