271 matches found
Joomla! Articles - Newsflash and Articles - Categories Modules Cross-Site Scripting Vulnerabilities
Joomla! is a U.S. Open Source Matters team using PHP and MySQL development of a set of open source, cross-platform content management system CMS.Articles - Newsflash is one of the Flash content extension module.Articles - Categories is one of the article classification module. A cross-site...
Security feature bypass
Joomla! commailto 1.5.x through 1.5.13 has an automated mail timeout bypass...
CVE-2020-8419
An issue was discovered in Joomla! before 3.9.15. Missing token checks in the batch actions of various components cause CSRF vulnerabilities...
CVE-2011-4907
Joomla! 1.5x through 1.5.12: Missing JEXEC Check...
Path traversal
An issue was discovered in Joomla! before 3.9.13. A missing access check in the phputf8 mapping files could lead to a path disclosure...
EUVD-2019-4349
An issue was discovered in Joomla! before 3.9.7. The CSV export of comactionslogs is vulnerable to CSV injection...
Joomla! 3.x < 3.9.4 Multiple Vulnerabilities
According to its self-reported version number, the Joomla! installation running on the remote web server is prior to 3.9.4. It is, therefore, affected by multiple vulnerabilities: - A logic error exists in sample data plugins that allows remote attackers to gain unauthorized access to unspecified...
Joomla! 3.8.x < 3.8.2 Multiple Vulnerabilities
According to its self-reported version number, the detected Joomla! application is affected by an authentication bypass and multiple information disclosure vulnerabilities. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version...
Joomla! 3.7.x < 3.8.2 Multiple Vulnerabilities
According to its self-reported version number, the detected Joomla! application is affected by an authentication bypass and multiple information disclosure vulnerabilities. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version...
Joomla! 1.7.x < 3.8.8 Multiple Vulnerabilities
According to its self-reported version number, the detected Joomla! application is affected by multiple vulnerabilities : - ACL violation in access levels affects Joomla 2.5.0 through 3.8.7 - Adding phar files to the upload blacklist affects Joomla 2.5.0 through 3.8.7 - Information Disclosure abo...
Joomla! security bypass vulnerability (CNVD-2018-15194)
Joomla! is an open source content management system CMS. The system provides RSS feeds , site search and other features . Joomla! Core is a Joomla! core. A security vulnerability exists in Joomla! Core versions prior to 3.8.8, which stems from the program's failure to perform adequate testing. Th...
Joomla jDownloads 3.2.58 Component Cross Site Scripting Vulnerability
Exploit for php platform in category web applications Exploit Title: Joomla! Component jDownloads 3.2.58 - Cross Site Scripting Exploit Author: Sureshbabu Narvaneni Author Blog : http://nullnews.in Vendor Homepage: http://www.jdownloads.com/ Software Link:...
CVE-2018-5993
SQL Injection exists in the Aist through 2.0 component for Joomla! via the id parameter in a view=showvacancy request...
Joomla! Component Appointments for JomSocial 3.8.1 - SQL Injection
Exploit Title: Joomla! Component Appointments for JomSocial v3.8.1 - SQL Injection Google Dork: N/A Date: 25.02.2017 Vendor Homepage: https://www.cmsplugin.com/ Software : https://www.cmsplugin.com/products/components/1-appointments-for-jomsocial Demo:...
Joomla component com_affiliatetracker parameters user_id SQL injection vulnerability
No description provided by source...
Joomla! Component com_enmasse 5.1 < 6.4 - SQL Injection
Exploit Title: Joomla comenmasse - SQL Injection Author: Hamed Izadi IRAN Vendor Homepage : http://extensions.joomla.org/extensions/extension/social-web/social-buy/en-masse Category: Webapps Tested on: Win Versions: 5.1-6.4 Date: 2016/06/15 Google Dork: inurl:component/enmasse/ PoC: id Parameter...
Joomla Component com_easy_youtube_gallery 1.0.2 SQL Injection
SQL Injection vulnerability in Joomla Component comeasyyoutubegallery mycategory parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...
Joomla! Administrator File Upload [Templates]
Joomla! allows administrators to create and edit files using the template management page Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...
Joomla 3.4.5 Object Injection
package main / Exploit Title: Joomla 1.5.x to 3.4.5 Object Injection Exploit Exploit Author: Khashayar Fereidani http://fereidani.com Version: 1.5.x to 3.4.5 CVE : CVE-2015-8562 THIS EXPLOIT PUBLISHED ONLY FOR EDUCATIONAL PROPOSES ANY ILLEGAL USAGE IS ON YOUR OWN RESPONSIBILITY How to run : you...