VulnCheck KEV: CVE-2014-8739

Unrestricted file upload vulnerability in server/php/UploadHandler.php in the jQuery File Upload Plugin 6.4.4 for jQuery, as used in the Creative Solutions Creative Contact Form formerly Sexy Contact Form before 1.0.0 for WordPress and before 2.0.1 for Joomla!, allows remote attackers to...

Encryption Issues Vulnerabilities in Joomla!

Joomla! is the U.S. Open Source Matters team of a set of PHP and MySQL development using open source , cross-platform content management system CMS. A vulnerability exists in a cryptographic issue in Joomla! An attacker can exploit this vulnerability to obtain sensitive information...

CVE-2011-1151

Joomla! 1.6.0 is vulnerable to SQL Injection via the filterorder and filerorderDir parameters...

Sql injection

Joomla! 1.6.0 is vulnerable to SQL Injection via the filterorder and filerorderDir parameters...

CVE-2011-1151

CVE-2011-1151 affects Joomla! 1.6.0, vulnerable to SQL Injection via the filter_order (and filer_order_Dir) parameters in the core components. The root cause is improper input handling in the related request parameters, enabling an attacker to manipulate SQL queries. Technical details and impact ...

CVE-2011-1151

Joomla! 1.6.0 is vulnerable to SQL Injection via the filterorder and filerorderDir parameters...

CVE-2011-4912

Joomla! commailto 1.5.x through 1.5.13 has an automated mail timeout bypass...

Security feature bypass

Joomla! commailto 1.5.x through 1.5.13 has an automated mail timeout bypass...

CVE-2011-4912

Joomla! commailto 1.5.x through 1.5.13 has an automated mail timeout bypass...

CVE-2011-4912

CVE-2011-4912 affects Joomla! com_mailto 1.5.x through 1.5.13 and is characterized by an automated mail timeout bypass. The connected records reiterate the same issue across multiple sources. The documents do not provide concrete exploit details, affected configuration specifics, or a remediation...

CVE-2011-4937

Joomla! 1.7.1 has core information disclosure due to inadequate error checking...

CVE-2011-3629

Joomla! core 1.7.1 allows information disclosure due to weak encryption...

Information disclosure

Joomla! core 1.7.1 allows information disclosure due to weak encryption...

Information disclosure

Joomla! 1.7.1 has core information disclosure due to inadequate error checking...

CVE-2011-3629

Joomla! core 1.7.1 is affected by CVE-2011-3629, which enables information disclosure due to weak encryption. The linked records (NVD/RH, Nessus 113944, CNVD, etc.) consistently describe a vulnerability in Joomla! affecting 1.7.1 that exposes sensitive information through weak cryptographic pract...

CVE-2011-3629

Joomla! core 1.7.1 allows information disclosure due to weak encryption...

CVE-2011-4937

Joomla! 1.7.1 has core information disclosure due to inadequate error checking...

CVE-2011-4937

CVE-2011-4937 affects Joomla! 1.7.1 core code, causing information disclosure due to inadequate error checking. The vulnerability exposes partial confidentiality without evident exploitation details in the provided docs. References consistently describe core information disclosure in Joomla! 1.7....

Joomla! com_actionlogs Cross-Site Scripting Vulnerability

Joomla! is a content management application. A cross-site scripting vulnerability exists in Joomla! comactionlogs, which can be exploited by remote attackers to inject malicious script or HTML code, which can be used to obtain sensitive information or hijack user sessions when malicious data is...

CVE-2020-5182

The J-BusinessDirectory extension before 5.2.9 for Joomla! allows Reverse Tabnabbing. In some configurations, the link to the business website can be entered by any user. If it doesn't contain rel="noopener" or similar attributes such as noreferrer, the tabnabbing may occur. To reproduce the bug,...