Joomla 3.4.6 Remote Code Execution

Exploit Title: Joomla 3.4.6 - 'configuration.php' Remote Code Execution Google Dork: N/A Date: 2019-10-02 Exploit Author: Alessandro Groppo @Hacktive Security Vendor Homepage: https//www.joomla.it/ Software Link: https://downloads.joomla.org/it/cms/joomla3/3-4-6 Version: 3.0.0 -- 3.4.6 Tested on:...

Joomla 3.4.6 - (configuration.php) Remote Code Execution Exploit

Exploit for php platform in category web applications Exploit Title: Joomla 3.4.6 - 'configuration.php' Remote Code Execution Google Dork: N/A Date: 2019-10-02 Exploit Author: Alessandro Groppo @Hacktive Security Vendor Homepage: https//www.joomla.it/ Software Link:...

Joomla! 3.4.6 - 'configuration.php' Remote Code Execution

Exploit Title: Joomla 3.4.6 - 'configuration.php' Remote Code Execution Google Dork: N/A Date: 2019-10-02 Exploit Author: Alessandro Groppo @Hacktive Security Vendor Homepage: https//www.joomla.it/ Software Link: https://downloads.joomla.org/it/cms/joomla3/3-4-6 Version: 3.0.0 -- 3.4.6 Tested on:...

Joomla! 3.0.x < 3.9.12 Cross-Site Scripting

According to its self-reported version number, the detected Joomla! application is affected by a cross-site scripting vulnerability in versions 3.0.0 to 3.9.11 due to inadequate escaping in the logo parameter of the default templates. Note that the scanner has not tested for these issues but has...

Joomla! < 3.9.12 XSS Vulnerability

Joomla! is prone to a cross-site scripting vulnerability due to inadequate escaping, which makes attacks using the logo parameter of the default templates possible. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C b...

Joomla! cross-site scripting vulnerability (CNVD-2020-12779)

Joomla! is the U.S. Open Source Matters team of a set of PHP and MySQL development using open source , cross-platform content management system CMS. A cross-site scripting vulnerability exists in Joomla! The vulnerability stems from a lack of proper validation of client-side data in the WEB...

Joomla 3.0.x < 3.9.12 Joomla 3.9.12 Release (5776-joomla-3-9-12)

According to its self-reported version, the instance of Joomla! running on the remote web server is 3.0.x prior to 3.9.12. It is, therefore, affected by a vulnerability. - Inadequate escaping allowed XSS attacks using the logo parameter of the default templates. CVE-2019-16725 Note that Nessus ha...

CVE-2019-16725

In Joomla! 3.x before 3.9.12, inadequate escaping allowed XSS attacks using the logo parameter of the default templates...

CVE-2019-16725

In Joomla! 3.x before 3.9.12, inadequate escaping allowed XSS attacks using the logo parameter of the default templates...

Cross site scripting

In Joomla! 3.x before 3.9.12, inadequate escaping allowed XSS attacks using the logo parameter of the default templates...

CVE-2019-16725

In Joomla! 3.x before 3.9.12, inadequate escaping allowed XSS attacks using the logo parameter of the default templates...

CVE-2019-16725

CVE-2019-16725 affects Joomla! 3.x before 3.9.12. The vulnerability arises from inadequate escaping in the logo parameter of the default templates, enabling cross-site scripting (XSS). The NVD records CVSS v3.1 base score 6.1 (NETWORK, LOW ATTACK COMPLEXITY, UI REQUIRED, Privileges NONE) and CVSS...

Exploit for Cross-site Scripting in Kunena

CVE-2019-15120 Exploit for XSS via BBCode on Kunena extension...

dev.intellizim.com Improper Access Control vulnerability

Open Bug Bounty ID: OBB-969295 Security Researcher drok3r Helped patch 244 vulnerabilities Received 4 Coordinated Disclosure badges Received 1 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting dev.intellizim.com website and...

tecso.com.mx Improper Access Control vulnerability

Open Bug Bounty ID: OBB-969294 Security Researcher drok3r Helped patch 244 vulnerabilities Received 4 Coordinated Disclosure badges Received 1 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting tecso.com.mx website and its...

Joomla Easy GuestBook 1.0 SQL Injection

Exploit Title : Joomla 1.0.15 Easy GuestBook ComEasyGB Components 1.0 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 29/08/2019 Vendor Homepage : joomlacode.org/gf/project/easygb/ - joomlart.com Joomla Affected Version : Joomla 1.0.12 - Joomla...

Joomla JomEstate 4.1 SQL Injection

Exploit Title : Joomla 2.5.28 ComJomEstate Real Estate Components 4.1 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 29/08/2019 Vendor Homepage : comdev.eu/jomestate Joomla Affected Versions : Joomla 1.5.18 Joomla 1.5.26 - Joomla 1.6 - Joomla 1.7...

Joomla Component com_jssupportticket SQL Injection

SQL Injection vulnerability in Joomla Component comjssupportticket child parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

Joomla Component Proclaim Backup File Download (CVE-2018-7317)

An information disclosure vulnerability exists in Joomla Component Proclaim. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...

Joomla OrgChart 1.0.0 Cross Site Scripting / SQL Injection

Exploit Title : Joomla 1.5.26 ComOrgChart Components 1.0.0 XSS SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 24/08/2019 Vendor Homepage : ibrini.com - cmspal.it - altropiano.com - Software Download Link :...