19250 matches found
CVE-2011-3629
Joomla! core 1.7.1 allows information disclosure due to weak encryption...
Information disclosure
Joomla! core 1.7.1 allows information disclosure due to weak encryption...
Information disclosure
Joomla! 1.7.1 has core information disclosure due to inadequate error checking...
CVE-2011-3629
Joomla! core 1.7.1 is affected by CVE-2011-3629, which enables information disclosure due to weak encryption. The linked records (NVD/RH, Nessus 113944, CNVD, etc.) consistently describe a vulnerability in Joomla! affecting 1.7.1 that exposes sensitive information through weak cryptographic pract...
CVE-2011-3629
Joomla! core 1.7.1 allows information disclosure due to weak encryption...
CVE-2011-4937
Joomla! 1.7.1 has core information disclosure due to inadequate error checking...
CVE-2011-4937
CVE-2011-4937 affects Joomla! 1.7.1 core code, causing information disclosure due to inadequate error checking. The vulnerability exposes partial confidentiality without evident exploitation details in the provided docs. References consistently describe core information disclosure in Joomla! 1.7....
Joomla! com_actionlogs Cross-Site Scripting Vulnerability
Joomla! is a content management application. A cross-site scripting vulnerability exists in Joomla! comactionlogs, which can be exploited by remote attackers to inject malicious script or HTML code, which can be used to obtain sensitive information or hijack user sessions when malicious data is...
CVE-2020-5182
The J-BusinessDirectory extension before 5.2.9 for Joomla! allows Reverse Tabnabbing. In some configurations, the link to the business website can be entered by any user. If it doesn't contain rel="noopener" or similar attributes such as noreferrer, the tabnabbing may occur. To reproduce the bug,...
CVE-2020-5182
The J-BusinessDirectory extension before 5.2.9 for Joomla! allows Reverse Tabnabbing. In some configurations, the link to the business website can be entered by any user. If it doesn't contain rel="noopener" or similar attributes such as noreferrer, the tabnabbing may occur. To reproduce the bug,...
Design/Logic Flaw
The J-BusinessDirectory extension before 5.2.9 for Joomla! allows Reverse Tabnabbing. In some configurations, the link to the business website can be entered by any user. If it doesn't contain rel="noopener" or similar attributes such as noreferrer, the tabnabbing may occur. To reproduce the bug,...
CVE-2020-5182
The CVE-2020-5182 vulnerability affects the J-BusinessDirectory extension for Joomla! versions before 5.2.9. It enables Reverse Tabnabbing when a link to a business website is entered without rel="noopener" (or equivalent like noreferrer); a crafted link can exploit window.opener to redirect the ...
CVE-2020-5182
The J-BusinessDirectory extension before 5.2.9 for Joomla! allows Reverse Tabnabbing. In some configurations, the link to the business website can be entered by any user. If it doesn't contain rel="noopener" or similar attributes such as noreferrer, the tabnabbing may occur. To reproduce the bug,...
Joomla! 3.x < 3.9.15 Multiple Vulnerabilities
According to its self-reported version number, the detected Joomla! application is affected by multiple vulnerabilities : - A cross-site request forgery CSRF exists in versions 3.0.0 to 3.9.14 due to a missing token checks in the batch actions of various components CVE-2020-8419 - A cross-site...
Joomla! 2.5.x < 3.9.14 Multiple Vulnerabilities
According to its self-reported version number, the detected Joomla! application is affected by multiple vulnerabilities : - A path disclosure exists in versions 3.8.0 to 3.9.13 due to a missing access check in framework files CVE-2019-19845 - SQL injection vulnerabilities exist in versions 2.5.0 ...
Joomla 3.0.x < 3.9.15 Multiple Vulnerabilities (5782-joomla-3-9-15)
According to its self-reported version, the instance of Joomla! running on the remote web server is 3.0.x prior to 3.9.15. It is, therefore, affected by multiple vulnerabilities. - An issue was discovered in Joomla! before 3.9.15. Missing token checks in the batch actions of various components...
Joomla! 3.9.0 - 3.9.14 XSS Vulnerability
Joomla! is prone to a cross-site scripting vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:joomla:joomla";...
Joomla! 3.0.0 - 3.9.14 Multiple Vulnerabilities
Joomla! is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:joomla:joomla"; ifdescription...