19343 matches found
SQL Injection Vulnerability in Joomla All Video Share Component
Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the Joomla All Video Share component. The vulnerability allows attackers to obtain sensitive database information...
Joomla Component XMap SQL Injection Vulnerability
Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the Joomla component XMap. The flaw is due to input passed to 'index.php' via the 'view=' and 'itemID=' parameters failing to be properly filtered before being used in SQL queries. An attacker could...
Joomla! access control error vulnerability (CNVD-2019-15988)
Joomla! is the U.S. Open Source Matters team of a set of PHP and MySQL development using open source , cross-platform content management system CMS. An Access Control Error vulnerability exists in Joomla! versions prior to 3.9.4, which stems from a lack of ACL checking in the Sample Data plugin a...
Joomla! cross-site scripting vulnerability (CNVD-2019-15987)
Joomla! is the U.S. Open Source Matters team of a set of PHP and MySQL development using open source , cross-platform content management system CMS. A cross-site scripting vulnerability exists in Joomla! versions prior to 3.9.4, which can be exploited by remote attackers to execute arbitrary scri...
Joomla! cross-site scripting vulnerability (CNVD-2019-15986)
Joomla! is the U.S. Open Source Matters team of a set of PHP and MySQL development using open source , cross-platform content management system CMS. A cross-site scripting vulnerability exists in Joomla! versions prior to 3.9.4, which stems from the program's failure to filter user-submitted inpu...
Joomla! 3.0.x < 3.9.4 Multiple Vulnerabilities
According to its self-reported version number, the detected Joomla! application is affected by multiple vulnerabilities : - Lack of ACL checks in sample data plugins affects Joomla 3.8.0 through 3.9.3 - XSS in comconfig JSON handler affects Joomla 3.2.0 through 3.9.3 - XSS in itemtitle layout...
Joomla! cross-site scripting vulnerability (CNVD-2019-15989)
Joomla! is a globally recognized content management system developed using PHP language and MySQL database, which can be implemented on various platforms such as Linux, Windows, MacOSX and so on. A cross-site scripting vulnerability exists in the media form field in versions of Joomla! prior to...
Joomla! < 3.9.4 Multiple Vulnerabilities
Joomla! is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:joomla:joomla"; ifdescription...
Joomla! 3.x < 3.9.4 Multiple Vulnerabilities
According to its self-reported version number, the Joomla! installation running on the remote web server is prior to 3.9.4. It is, therefore, affected by multiple vulnerabilities: - A logic error exists in sample data plugins that allows remote attackers to gain unauthorized access to unspecified...
Design/Logic Flaw
An issue was discovered in Joomla! before 3.9.4. The sample data plugins lack ACL checks, allowing unauthorized access...
CVE-2019-9713
An issue was discovered in Joomla! before 3.9.4. The sample data plugins lack ACL checks, allowing unauthorized access...
CVE-2019-9712
An issue was discovered in Joomla! before 3.9.4. The JSON handler in comconfig lacks input validation, leading to XSS...
CVE-2019-9714
An issue was discovered in Joomla! before 3.9.4. The media form field lacks escaping, leading to XSS...
CVE-2019-9714
An issue was discovered in Joomla! before 3.9.4. The media form field lacks escaping, leading to XSS...
CVE-2019-9713
An issue was discovered in Joomla! before 3.9.4. The sample data plugins lack ACL checks, allowing unauthorized access...
CVE-2019-9712
An issue was discovered in Joomla! before 3.9.4. The JSON handler in comconfig lacks input validation, leading to XSS...
CVE-2019-9711
An issue was discovered in Joomla! before 3.9.4. The itemtitle layout in edit views lacks escaping, leading to XSS...
Input validation
An issue was discovered in Joomla! before 3.9.4. The JSON handler in comconfig lacks input validation, leading to XSS...