CVE-2019-6264

Joomla! prior to 3.9.2 is affected by a stored XSS in mod_banners due to inadequate escaping (also reflected in related Nessus/OpenVAS findings for Joomla! components). The issue allows injection of script/HTML via the affected banner component and is described across multiple sources as a stored...

CVE-2019-6262

An issue was discovered in Joomla! before 3.9.2. Inadequate checks of the Global Configuration helpurl settings allowed stored XSS...

CVE-2019-6263

An issue was discovered in Joomla! before 3.9.2. Inadequate checks of the Global Configuration Text Filter settings allowed stored XSS...

CVE-2019-6261

CVE-2019-6261 concerns Joomla! prior to 3.9.2, with a stored XSS flaw in com_contact due to inadequate escaping. The issue is documented as a stored cross-site scripting vulnerability that can impact confidentiality and integrity (per CVSS). Affected component: com_contact (and related reports ac...

CVE-2019-6264

An issue was discovered in Joomla! before 3.9.2. Inadequate escaping in modbanners leads to a stored XSS vulnerability...

CVE-2019-6263

CVE-2019-6263 affects Joomla!

Joomla! cross-site scripting vulnerability (CNVD-2019-14557)

Joomla! is a globally recognized content management system developed using the PHP language coupled with a MySQL database that can be implemented on various platforms such as Linux, Windows, MacOSX, and many others. A cross-site scripting vulnerability exists in modbanners in Joomla! versions 2.5...

Joomla! cross-site scripting vulnerability (CNVD-2019-14555)

Joomla! is a globally recognized content management system developed using the PHP language coupled with a MySQL database that can be implemented on various platforms such as Linux, Windows, MacOSX, and many others. A cross-site scripting vulnerability exists in the Global Configuration textfilte...

Joomla! cross-site scripting vulnerability (CNVD-2019-14556)

Joomla! is a globally recognized content management system developed using the PHP language coupled with a MySQL database that can be implemented on various platforms such as Linux, Windows, MacOSX, and many others. A cross-site scripting vulnerability exists in the Global Configuration help url ...

Joomla! 2.5.x < 3.9.2 Multiple Vulnerabilities

According to its self-reported version number, the detected Joomla! application is affected by multiple vulnerabilities : - Stored XSS in modbanners affects Joomla 2.5.0 through 3.9.1 - Stored XSS in comcontact affects Joomla 2.5.0 through 3.9.1 - Stored XSS issue in the Global Configuration...

Joomla! cross-site scripting vulnerability (CNVD-2019-14554)

Joomla! is a globally recognized content management system developed using PHP language and MySQL database, which can be implemented on various platforms such as Linux, Windows, MacOSX and so on. A cross-site scripting vulnerability exists in comcontact in Joomla! versions 2.5.0 through 3.9.1,...

Joomla Simple RSS Feed Reader mod_jw_srfr 3.6.0 Open Redirection

Exploit Title : Joomla Simple RSS Feed Reader modjwsrfr 3.6.0 Modules Open Redirect Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 14/01/2019 Vendor Homepage : joomlaworks.net Software Download Links : joomlaworks.net/downloads/?f=modjwsrfr-v3.6.0j2.5-3.x.zip...

Joomla! < 3.9.2 Multiple Stored XSS Vulnerabilities

According to its self-reported version number, the Joomla! installation running on the remote web server is prior to 3.9.2. It is, therefore, affected by multiple stored XSS vulnerabilities as a result of inadequate escaping in modbanners and comcontacts, as well as inadequate checks in global...

Joomla JoomProject 1.1.3.2 Component - Information Disclosure Exploit

Exploit for php platform in category web applications Exploit Title: Joomla! Component JoomProject 1.1.3.2 - Information Disclosure Exploit Author: Ihsan Sencan Vendor Homepage: http://joomboost.com/ Software Link:...

Joomla JoomCRM 1.1.1 Component - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component JoomCRM 1.1.1 - SQL Injection Exploit Author: Ihsan Sencan Vendor Homepage: http://joomboost.com/ Software Link: https://extensions.joomla.org/extensions/extension/marketing/crm/joomcrm/ Version: 1.1.1 Category...

Joomla! Component JoomCRM 1.1.1 - SQL Injection

Joomla! Component JoomCRM 1.1.1 - SQL Injection Exploit Title: Joomla! Component JoomCRM 1.1.1 - SQL Injection Dork: N/A Date: 2019-01-11 Exploit Author: Ihsan Sencan Vendor Homepage: http://joomboost.com/ Software Link: https://extensions.joomla.org/extensions/extension/marketing/crm/joomcrm/...

Joomla! JoomCRM 1.1.1 SQL Injection

Exploit Title: Joomla! Component JoomCRM 1.1.1 - SQL Injection Dork: N/A Date: 2019-01-11 Exploit Author: Ihsan Sencan Vendor Homepage: http://joomboost.com/ Software Link: https://extensions.joomla.org/extensions/extension/marketing/crm/joomcrm/ Version: 1.1.1 Category: Webapps Tested on:...

Joomla! Component JoomCRM 1.1.1 - SQL Injection

Exploit Title: Joomla! Component JoomCRM 1.1.1 - SQL Injection Dork: N/A Date: 2019-01-11 Exploit Author: Ihsan Sencan Vendor Homepage: http://joomboost.com/ Software Link: https://extensions.joomla.org/extensions/extension/marketing/crm/joomcrm/ Version: 1.1.1 Category: Webapps Tested on:...

Joomla! JoomProject 1.1.3.2 Information Disclosure

Exploit Title: Joomla! Component JoomProject 1.1.3.2 - Information Disclosure Dork: N/A Date: 2019-01-11 Exploit Author: Ihsan Sencan Vendor Homepage: http://joomboost.com/ Software Link: https://extensions.joomla.org/extensions/extension/clients-a-communities/project-a-task-management/joomprojec...

Joomla! Component JoomProject 1.1.3.2 - Information Disclosure

Joomla! Component JoomProject 1.1.3.2 - Information Disclosure Exploit Title: Joomla! Component JoomProject 1.1.3.2 - Information Disclosure Dork: N/A Date: 2019-01-11 Exploit Author: Ihsan Sencan Vendor Homepage: http://joomboost.com/ Software Link:...