178 matches found
CVE-2017-9934: Improper Neutralization of Input During Web Page Generation
Missing CSRF token checks and improper input validation in Joomla! CMS 1.7.3 through 3.7.2 lead to an XSS vulnerability...
PT-2017-19297
Name of the Vulnerable Software and Affected Versions Joomla! CMS versions 1.7.3 through 3.7.2 Description The issue is related to missing CSRF token checks and improper input validation, leading to a potential XSS vulnerability. Recommendations For versions 1.7.3 through 3.7.2, update to a versi...
Joomla! cross-site scripting vulnerability (CNVD-2017-22326)
Joomla! CMS is a U.S. Open Source Matters team developed a set of open source content management system CMS. The system provides RSS feeds , site search and other functions . A cross-site scripting vulnerability exists in Joomla! CMS versions 1.7.3 to 3.7.2, which stems from a lack of cross-site...
Joomla com_publication component 'sid' parameter SQL injection vulnerability
Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the 'sid' parameter of the Joomla compublication component. An attacker can exploit the vulnerability to access or modify database data...
CMS File Upload Vulnerability
Joomla! CMS is a U.S. Open Source Matters team developed a set of open source content management system CMS. The system provides RSS feeds , site search and other functions . A file upload vulnerability exists in the file scanning mechanism in the 'JFilterInput::isFileSafe' function in Joomla! CM...
CVE-2016-9836
The file scanning mechanism of JFilterInput::isFileSafe in Joomla! CMS before 3.6.5 does not consider alternative PHP file extensions when checking uploaded files for PHP content, which enables a user to upload and execute files with the .php6, .php7, .phtml, and .phpt extensions. Additionally,...
CVE-2016-9836
The file scanning mechanism of JFilterInput::isFileSafe in Joomla! CMS before 3.6.5 does not consider alternative PHP file extensions when checking uploaded files for PHP content, which enables a user to upload and execute files with the .php6, .php7, .phtml, and .phpt extensions. Additionally,...
CVE-2016-9836
CVE-2016-9836 affects Joomla! CMS versions up to 3.6.4 (self-reported). The file scanning in JFilterInput::isFileSafe() fails to consider alternative PHP extensions (e.g., .php6, .php7, .phtml, .phpt) when validating uploaded files, enabling execution of uploaded PHP content. Additionally, JHelpe...
PT-2016-7836
Name of the Vulnerable Software and Affected Versions Joomla! CMS versions prior to 3.6.5 Description The issue concerns the file scanning mechanism in Joomla! CMS, specifically the JFilterInput::isFileSafe function, which fails to account for alternative PHP file extensions when checking uploade...
CVE-2016-9836: Improper Access Control
The file scanning mechanism of JFilterInput::isFileSafe in Joomla! CMS before 3.6.5 does not consider alternative PHP file extensions when checking uploaded files for PHP content, which enables a user to upload and execute files with the .php6, .php7, .phtml, and .phpt extensions. Additionally,...
Joomla Extra Search 2.2.8 SQL Injection
Exploit Title : Joomla comextrasearch SQL injection Vulnerability Exploit Author : howucan Website : http://howucan.gr Dork : inurl:/index.php?option=comextrasearch establename Software link : http://www.joomlaboat.com/extra-search Software version : 2.2.8 video : http://adf.ly/1cmGen Tested on:...
Joomla com_music SQL injection vulnerability
No description provided by source...
Joomla com_branch SQL注入漏洞
No description provided by source...
Joomla Jumi 3.0.5 Cross Site Scripting
No description provided by source...
Joomla com_jotloader - Full Path Disclosure Vulnerability
No description provided by source...
Joomla CMS 'login' Module XSS Vulnerability
Joomla is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:joomla:joomla";...
Joomla! CMS 3.4.3 Cross Site Scripting Vulnerability
Joomla! CMS versions 3.4.0 through 3.4.3 suffer from a cross site scripting vulnerability. Exploit Title: Joomla! CMS 3.4.0-3.4.3 XSS Vulnerability Date: 2015-08-18 Exploit Author: cfreer email protected & 0keeteam Vendor Homepage: http://joomla.org Version: 3.4.0 through 3.4.3 Tested on:...
Joomla! 3.4.x < 3.4.4 Login Module XSS
According to its self-reported version number, the Joomla! installation running on the remote web server is 3.4.x prior to 3.4.4. It is, therefore, affected a cross-site XSS scripting vulnerability in the login module due to improper validation of user-supplied input. An unauthenticated, remote...
PT-2015-5313
Name of the Vulnerable Software and Affected Versions Joomla! CMSJunkie J-ClassifiedsManager component affected versions not specified Description A SQL injection issue exists, allowing remote attackers to execute arbitrary SQL commands. This is achieved by manipulating the id parameter in a view...