19612 matches found
Joomla! Extension 'JCK Suite' - 'jckeditor' =< 6.4.4 Privilege Escalation
The Joomla! application running on the remote host has a version of 'JCK Suite' - 'jckeditor' extension that is prior or equal to 6.4.4. As such, the host is affected by a SQL injection SQLi vulnerability exists due to improper validation of user-supplied input. An unauthenticated, remote attacke...
Joomla Akeeba Backup Component Database Disclosure Vulnerability
Joomla is an open source content management system CMS. A database disclosure vulnerability exists in the Joomla Akeeba Backup component. An attacker can exploit the vulnerability to obtain sensitive database information...
Joomla! Extension Detection
Binary data joomlaextensiondetect.nbin...
Multiple Vulnerabilities in Joomla FPSS Art Frontpage Slideshow Component
Joomla is an open source content management system CMS. Database disclosure, open redirection, and SQL injection vulnerabilities exist in the Joomla FPSS Art Frontpage Slideshow component. An attacker can exploit the vulnerabilities to obtain sensitive information...
Joomla JVFramework 1.6.4.0 Database Disclosure
Exploit Title : Joomla JVFramework Components 1.6.4.0 Database Disclosure Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 19/01/2019 Vendor Homepages : joomlavi.com jvframework.com Software Download Link :...
Joomla FPSS Art Frontpage Slideshow 1.6.0 Database Disclose / SQL Injection
Exploit Title : Joomla FPSS Art Frontpage Slideshow Components 1.6.0 Database Disclosure / Open Redirection / SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 19/01/2019 Vendor Homepage : artetics.com Software Information Link :...
Joomla Core 3.9.1 - Persistent Cross-Site Scripting in Global Configuration Textfilter Settings
Exploit for php platform in category web applications Exploit Title: Joomla Global Configuration Text Filter settings Stored XSS Vulnerability Exploit Author: Praveen Sutar , Twitter: @praveensutar123 Vendor Homepage: https://www.joomla.org/ Affected Versions: Joomla versions 2.5.0 through 3.9.1...
Joomla! 3.9.1 Cross Site Scripting
Exploit Title: Joomla Global Configuration Text Filter settings Stored XSS Vulnerability Date: 18/01/2019 Exploit Author: Praveen Sutar , Twitter: @praveensutar123 Vendor Homepage: https://www.joomla.org/ Affected Versions: Joomla versions 2.5.0 through 3.9.1 Tested on: Joomla 3.9.1 CVE :...
Joomla! Core 3.9.1 - Persistent Cross-Site Scripting in Global Configuration Textfilter Settings
Exploit Title: Joomla Global Configuration Text Filter settings Stored XSS Vulnerability Date: 18/01/2019 Exploit Author: Praveen Sutar , Twitter: @praveensutar123 Vendor Homepage: https://www.joomla.org/ Affected Versions: Joomla versions 2.5.0 through 3.9.1 Tested on: Joomla 3.9.1 CVE :...
Joomla! Core 3.9.1 - Persistent Cross-Site Scripting in Global Configuration Textfilter Settings
Joomla! Core 3.9.1 - Persistent Cross-Site Scripting in Global Configuration Textfilter Settings Exploit Title: Joomla Global Configuration Text Filter settings Stored XSS Vulnerability Date: 18/01/2019 Exploit Author: Praveen Sutar , Twitter: @praveensutar123 Vendor Homepage:...
Joomla! < 3.9.2 Multiple Vulnerabilities
Joomla! is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:joomla:joomla"; ifdescription...
Joomla ZHYandexMap 8.0.0.2 Database Disclosure
Exploit Title : Joomla ZHYandexMap Components 8.0.0.2 Database Disclosure Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 18/01/2019 Vendor Homepage : joomla.org Software Information Link : extensions.joomla.org/extension/zh-yandexmap/ Software Download Link :...
Joomla YoutubeGallery 4.5.8 Database Disclosure / SQL Injection
Exploit Title : Joomla YoutubeGallery Components 4.5.8 Database Disclosure and SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 18/01/2019 Vendor Homepage : joomlaboat.com Software Information Links : extensions.joomla.org/extension/youtube-gallery/...
Cross site scripting
An issue was discovered in Joomla! before 3.9.2. Inadequate checks of the Global Configuration Text Filter settings allowed stored XSS...
Cross site scripting
An issue was discovered in Joomla! before 3.9.2. Inadequate escaping in comcontact leads to a stored XSS vulnerability...
CVE-2019-6261
An issue was discovered in Joomla! before 3.9.2. Inadequate escaping in comcontact leads to a stored XSS vulnerability...
CVE-2019-6264
An issue was discovered in Joomla! before 3.9.2. Inadequate escaping in modbanners leads to a stored XSS vulnerability...
CVE-2019-6263
An issue was discovered in Joomla! before 3.9.2. Inadequate checks of the Global Configuration Text Filter settings allowed stored XSS...
