CVE-2015-8563

Cross-site request forgery CSRF vulnerability in the comtemplates component in Joomla! 3.2.0 through 3.3.x and 3.4.x before 3.4.6 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2015-8562

CVE-2015-8562 affects Joomla! 1.5.x, 2.x, and 3.x prior to 3.4.6. The vulnerability enables remote PHP object injection that can lead to arbitrary code execution, originally described as exploitable via the HTTP User-Agent header. Public PoCs and exploits exist (e.g., Exploit-DB entries for CVE-2...

Joomla-FaceGallery 1.0 /index.php 任意文件下载漏洞

No description provided by source...

Joomla (JBDiary) BLIND SQL Injection Vulnerabilities

No description provided by source...

Joomla Component com_K2 -q 1.0.1b (category) SQL Injection Vuln

No description provided by source. ---------------------------------------------------------------------- Joomla Component comk2 sectionid SQL injection Vulnerability ---------------------------------------------------------------------- + Author : Chip D3 Bi0s + Email : chipdebiosalt+64gmail.com...

Joomla Component Ultimate Portfolio com_ultimateportfolio Local File Inclusion Vulnerability

No description provided by source...

Joomla Captcha Plugin <= 4.5.1 - Local File Disclosure Vulnerability

No description provided by source. :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP YmmMMMM MMM YM Discovered by dun \ posdubatgmail.com Joomla Captcha Plugin = 4.5.1 Local File Disclosure Vulnerability Script: Joomla Captcha plugin an...

Joomla Component com_biblestudy LFI Vulnerability

No description provided by source. @=======================================@ @=Script : Joomla Component combiblestudy @=Author : FL0RiX @=Greez : Deep-Power ,Pyske,Wretch-x & All Friends @=Bug Type : Local File Inlusion @=Dork : inurl:combiblestudy @=======================================@ @=Vul...

CVE-2013-5951

CVE-2013-5951 affects extplorer (2.1.3) used as a Joomla! component. The vulnerability arises from multiple cross-site scripting (XSS) flaws via PATH_INFO in application.js.php, admin.php, copy_move.php, functions.php, header.php, and upload.php (include/ directory). Consequence: remote attackers...

FreeBSD : Joomla! -- Core XSS Vulnerabilities (4158c57e-5d39-11e3-bc1e-6cf0490a8c18)

The JSST and the Joomla! Security Center report : 20131101 Core XSS Vulnerability Inadequate filtering leads to XSS vulnerability in comcontact. 20131102 Core XSS Vulnerability Inadequate filtering leads to XSS vulnerability in comcontact, comweblinks, comnewsfeeds. 20131103 Core XSS Vulnerabilit...

Joomla! -- XXS and DDoS vulnerabilities

The JSST and the Joomla! Security Center report: 20130405 - Core - XSS Vulnerability Inadequate filtering leads to XSS vulnerability in Voting plugin. 20130403 - Core - XSS Vulnerability Inadequate filtering allows possibility of XSS exploit in some circumstances. 20130402 - Core - Information...

Design/Logic Flaw

Joomla! 3.0.x through 3.0.2 allows attackers to obtain sensitive information via unspecified vectors related to "Coding errors."...

Design/Logic Flaw

Joomla! 2.5.3 allows remote attackers to obtain the installation path via the Host HTTP Header...

Joomla! Component com_szallasok - id SQL Injection

Joomla! Component comszallasok - id SQL Injection source: https://www.securityfocus.com/bid/54140/info The 'comszallasok' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful...

Joomla! 2.5.0 < 2.5.1 - Blind SQL Injection

!/usr/bin/perl Thu Mar 15 22:55:32 CET 2012 A. Ramos www.securitybydefault.com Joomla \n"; print "\texamples:\n"; print "\t get admin password:\n"; print "\t\t$0 http://host/joomla/ 3 'database'\n"; print "\t\t$0 http://host/joomla/ 3 'select tablename from informationschema.tables where...

Joomla Component com_addressbook 1.5.0 LFI

A simple LFI Vulnerability Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...

CVE-2010-4995

SQL injection vulnerability in the NeoRecruit comneorecruit component 1.6.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter in an offerview action to index.php, a different vector than CVE-2007-4506...

Joomla! 1.7.0-RC and lower | Multiple Cross Site Scripting (XSS) Vulnerabilities

No description provided by source. component: comsearch, parameter: searchword Browser: IE, Konqueror ===================================================================== N.B. Our previous reported issue 1.6.3 of "searchword" parameter XSS was not fixed completely. REQUEST POST...

CVE-2010-2680

Directory traversal vulnerability in the JExtensions JE Section/Property Finder jesectionfinder component for Joomla! allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the view parameter to index.php...

CVE-2010-2681

PHP remote file inclusion vulnerability in the SEF404x comsef component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig.absolute.path parameter to index.php...