19343 matches found
Joomla! 1.7.0 <= 3.9.5 XSS Vulnerability
Joomla! is prone to a cross-site scripting vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2019-11809
An issue was discovered in Joomla! before 3.9.6. The debug views of comusers do not properly escape user supplied data, which leads to a potential XSS attack vector...
CVE-2019-11809
An issue was discovered in Joomla! before 3.9.6. The debug views of comusers do not properly escape user supplied data, which leads to a potential XSS attack vector...
Cross site scripting
An issue was discovered in Joomla! before 3.9.6. The debug views of comusers do not properly escape user supplied data, which leads to a potential XSS attack vector...
CVE-2019-11809
Joomla! before 3.9.6 contains an XSS vulnerability in the debug views of com_users due to improper escaping of user-supplied data. Affects Joomla! versions prior to 3.9.6; exploitation details are not specified in the provided documents. Remediation is a vendor fix: upgrade to 3.9.6 or later.
CVE-2019-11809
An issue was discovered in Joomla! before 3.9.6. The debug views of comusers do not properly escape user supplied data, which leads to a potential XSS attack vector...
Joomla! component com_cwreserveer SQL Injection Vulnerability
Joomla! is an open source content management system CMS. The Joomla! component comcwreserveer SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive information...
ATSCAN
This is a tool called ATSCAN, a mass exploitation scanner. It is a Perl script that can be used to scan for various types of vulnerabilities, including XSS, LFI/RFI, and SQL injection. The tool can also be used to filter WordPress and Joomla sites, find admin pages, and perform other tasks. The...
Joomla! cross-site scripting vulnerability (CNVD-2019-15713)
Joomla! is the U.S. Open Source Matters team of a set of PHP and MySQL development using open source , cross-platform content management system CMS. A cross-site scripting vulnerability exists in versions of Joomla! prior to 3.9.6. The vulnerability stems from a lack of proper validation of...
File upload vulnerability in Joomla-cms version v3.9.6
Joomla! is a set of content management system CMS is quite well-known in foreign countries. A file upload vulnerability exists in Joomla-cms v3.9.6. A remote attacker can upload a PHP file with the help of a zip file and access the file to execute arbitrary PHP code...
CVE-2017-12758
https://www.joomlaextensions.co.in/ Joomla! Component Appointment 1.1 is affected by: SQL Injection. The impact is: Code execution remote. The component is: comappointment component...
CVE-2017-12758
https://www.joomlaextensions.co.in/ Joomla! Component Appointment 1.1 is affected by: SQL Injection. The impact is: Code execution remote. The component is: comappointment component...
Sql injection
https://www.joomlaextensions.co.in/ Joomla! Component Appointment 1.1 is affected by: SQL Injection. The impact is: Code execution remote. The component is: comappointment component...
CVE-2017-12758
https://www.joomlaextensions.co.in/ Joomla! Component Appointment 1.1 is affected by: SQL Injection. The impact is: Code execution remote. The component is: comappointment component...
CVE-2017-12758
https://www.joomlaextensions.co.in/ Joomla! Component Appointment 1.1 is affected by: SQL Injection. The impact is: Code execution remote. The component is: comappointment component...
CVE-2017-12758
CVE-2017-12758 : Joomla! Extension Appointment 1.1 exposes a SQL Injection in the com_appointment component that can lead to remote code execution. Documents confirm the affected software and underlaying vulnerability, with references including Exploit-DB. No explicit remediation/version fixes ar...
Serious Phar Flaw Allows Arbitrary Code Execution on Drupal
Multiple content management systems – including Drupal, Joomla and Typo3 – are open to a vulnerability that can lead to arbitrary code execution on some systems. The flaw CVE-2019-11831 exists in the phar stream wrapper component used in PHP-driven projects. A Phar archive is used to distribute a...
Joomla! prior to 3.9.6 Cross-Site Scripting (XSS) Vulnerability
According to its self-reported version number, the Joomla! installation running on the remote web server is prior to 3.9.6. In versions prior to 3.9.6, a cross-site scripting XSS vulnerability exists due to improper validation of user-supplied input before returning it to users. An unauthenticate...
Exploit for CVE-2013-0422
K8tools 20190428 声明: 工具仅供安全研究或授权渗透，非法用途后果自负。 博客: https://www.cnblogs.com/k8gege 下载: https://github.com/k8gege/K8tools PS: 不定期更新,文件比较大，可按需下载。工具有BUG或建议可直接Github上留言 提权工具均可在远控Cmd或WebShell运行，大部份经过修改编译兼容性稳定性更好 注意：不保证永久有效,喜欢自行保存。 综合工具 + 综合工具 K8飞刀Final.rar + K8data.mdb K8飞刀漏洞数据库20190402 + K8expList.txt...
ARI Quiz Component SQL Injection Vulnerability in Joomla!
Joomla! is a Content Management System CMS. A SQL injection vulnerability exists in the ARI Quiz component of Joomla! An attacker can trick the server into executing malicious SQL commands by inserting SQL commands into the query string of a web form submission or input domain or page request...