Design/Logic Flaw

Joomla! before 2.5.3 allows Admin Account Creation...

Default credentials

Joomla! core before 2.5.3 allows unauthorized password change...

CVE-2012-1563

Joomla! before 2.5.3 allows Admin Account Creation...

CVE-2012-1563

CVE-2012-1563 is described across multiple sources as a Joomla! vulnerability that allows an attacker to create an administrator account in affected installations. The core issue is consistently referenced as Joomla! before 2.5.3, with exploit tooling and public writeups targeting Joomla! 2.5.x (...

CVE-2012-1562

CVE-2012-1562 affects Joomla! core prior to 2.5.3, allowing unauthorized password changes. This is corroborated by multiple sources (NVD, Red Hat, Nessus) in the provided documents. No concrete exploit details or remediation steps are present in the connected documents; remediation/version fixes ...

CVE-2012-1562

Joomla! core before 2.5.3 allows unauthorized password change...

CVE-2013-3932

SQL injection vulnerability in the Jomres comjomres component before 7.3.1 for Joomla! allows remote authenticated users with the "Business Manager" permission to execute arbitrary SQL commands via the id parameter in an editProfile action to administrator/index.php...

CVE-2013-3931

Cross-site scripting XSS vulnerability in the Jomres comjomres component before 7.3.1 for Joomla! allows remote authenticated users with the "Business Manager" permission to inject arbitrary web script or HTML via the propertyname parameter, related to editing property details...

Sql injection

SQL injection vulnerability in the Jomres comjomres component before 7.3.1 for Joomla! allows remote authenticated users with the "Business Manager" permission to execute arbitrary SQL commands via the id parameter in an editProfile action to administrator/index.php...

Cross site scripting

Cross-site scripting XSS vulnerability in the Jomres comjomres component before 7.3.1 for Joomla! allows remote authenticated users with the "Business Manager" permission to inject arbitrary web script or HTML via the propertyname parameter, related to editing property details...

CVE-2013-3932

SQL injection vulnerability in the Jomres comjomres component before 7.3.1 for Joomla! allows remote authenticated users with the "Business Manager" permission to execute arbitrary SQL commands via the id parameter in an editProfile action to administrator/index.php...

CVE-2013-3932

CVE-2013-3932 affects the Jomres (com_jomres) Joomla! extension before 7.3.1. The flaw allows remote authenticated users with the Business Manager permission to inject SQL via the id parameter in an editProfile action to administrator/index.php, enabling arbitrary SQL execution and potential data...

CVE-2013-3931

The CVE-2013-3931 issue affects the Joomla! Joomla extension Jomres (com_jomres) before version 7.3.1. The vulnerability is a cross-site scripting (XSS) flaw in the property_name parameter used during editing property details, exploitable by remote authenticated users who have the Business Manage...

CVE-2013-3931

Cross-site scripting XSS vulnerability in the Jomres comjomres component before 7.3.1 for Joomla! allows remote authenticated users with the "Business Manager" permission to inject arbitrary web script or HTML via the propertyname parameter, related to editing property details...

CVE-2013-4692

CVE-2013-4692 corresponds to a cross-site scripting vulnerability in the Xorbin Analog Flash Clock extension for Joomla and related WordPress/XORBin clocks. The root cause is unsanitized input in the widgetUrl/urlWindow parameters from external input, enabling user-controllable script execution i...

CVE-2013-4692

Xorbin Analog Flash Clock 1.0 extension for Joomia has XSS...

Joomla! 2.5.0 - 3.9.13 SQLi Vulnerability

Joomla! is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:joomla:joomla";...

Joomla! 3.8.0 - 3.9.13 Path Disclosure Vulnerability

Joomla! is prone to a path disclosure vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:joomla:joomla"; ifdescriptio...

CVE-2019-17527

dataForDepandantField in models/custormfields.php in the JS JOBS FREE extension before 1.2.7 for Joomla! allows SQL Injection via the index.php?option=comjsjobs&task=customfields.getfieldtitlebyfieldandfieldfo child parameter...

CVE-2019-17527

dataForDepandantField in models/custormfields.php in the JS JOBS FREE extension before 1.2.7 for Joomla! allows SQL Injection via the index.php?option=comjsjobs&task=customfields.getfieldtitlebyfieldandfieldfo child parameter...