CVE-2018-17386

CVE-2018-17386 : The Joomla! Micro Deal Factory 2.4.0 component contains a SQL injection vulnerability via the id parameter or PATH_INFO routes (mydeals/ or listdeals/). Attackers could potentially execute arbitrary SQL commands against the underlying database. The description is consistently rep...

CVE-2018-17398

SQL Injection exists in the AMGallery 1.2.3 component for Joomla! via the filtercategoryid parameter...

CVE-2018-17398

CVE-2018-17398 affects Joomla! AMGallery 1.2.3 via the filter_category_id parameter, enabling SQL Injection. Root cause is improper handling of input in the AMGallery component; exploitation is network-based, with no authentication and no user interaction required. CVSS vectors indicate high/crit...

CVE-2018-17399

SQL Injection exists in the Jimtawl 2.2.7 component for Joomla! via the id parameter...

CVE-2018-17399

CVE-2018-17399 affects the Jimtawl 2.2.7 component for Joomla! via the id parameter, enabling SQL injection. The issue is documented across multiple feeds (e.g., Red Hat, CNVD, NVD, CVE List) as a SQL injection vulnerability with high to critical impact; exploitation details are referenced in Exp...

Joomla! 3.6.x < 3.9.7 Multiple Vulnerabilities

According to its self-reported version number, the detected Joomla! application is affected by multiple vulnerabilities : - A CSV injection exists in versions 3.9.0 to 3.9.6 within the CSV export of comactionslogs - A cross-site scripting XSS vulnerability exists in versions 3.6.0 to 3.9.6 due to...

Joomla 3.6.x < 3.9.7 Multiple Vulnerabilites

According to its self-reported version, the instance of Joomla! running on the remote web server is 3.6.x prior to 3.9.7. It is, therefore, affected by the following vulnerabilities: - Joomla versions 3.8.13 prior to 3.9.7 are affected by a vulnerability where a non-admin user may manipulate the...

Joomla! < 3.9.7 Multiple Vulnerabilities

Joomla! is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Injection Vulnerability in Joomla!

Joomla! is the U.S. Open Source Matters team of a set of PHP and MySQL development using open source , cross-platform content management system CMS. An injection vulnerability exists in Joomla! An attacker can exploit this vulnerability to conduct CSV injection attacks...

Joomla! cross-site scripting vulnerability (CNVD-2020-12781)

Joomla! is the U.S. Open Source Matters team of a set of PHP and MySQL development using open source , cross-platform content management system CMS. A cross-site scripting vulnerability exists in Joomla! The vulnerability stems from a lack of proper validation of client-side data in the WEB...

CVE-2019-12766

An issue was discovered in Joomla! before 3.9.7. The subform fieldtype does not sufficiently filter or validate input of subfields. This leads to XSS attack vectors...

CVE-2019-12766

An issue was discovered in Joomla! before 3.9.7. The subform fieldtype does not sufficiently filter or validate input of subfields. This leads to XSS attack vectors...

CVE-2019-12765

An issue was discovered in Joomla! before 3.9.7. The CSV export of comactionslogs is vulnerable to CSV injection...

CVE-2019-12764

An issue was discovered in Joomla! before 3.9.7. The update server URL of comjoomlaupdate can be manipulated by non Super-Admin users...

Design/Logic Flaw

An issue was discovered in Joomla! before 3.9.7. The subform fieldtype does not sufficiently filter or validate input of subfields. This leads to XSS attack vectors...

Code injection

An issue was discovered in Joomla! before 3.9.7. The update server URL of comjoomlaupdate can be manipulated by non Super-Admin users...

CVE-2019-12765

An issue was discovered in Joomla! before 3.9.7. The CSV export of comactionslogs is vulnerable to CSV injection...

CVE-2019-12764

An issue was discovered in Joomla! before 3.9.7. The update server URL of comjoomlaupdate can be manipulated by non Super-Admin users...

Input validation

An issue was discovered in Joomla! before 3.9.7. The CSV export of comactionslogs is vulnerable to CSV injection...

CVE-2019-12766

CVE-2019-12766 relates to Joomla! before 3.9.7, where the subform fieldtype fails to filter/validate input in subfields, enabling cross-site scripting (XSS) vectors. The issue is documented across multiple sources referencing Joomla! core before 3.9.7 and specifically the subform input validation...