Joomla com_jotloader - Full Path Disclosure Vulnerability

No description provided by source...

Joomla CMS 'login' Module XSS Vulnerability

Joomla is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:joomla:joomla";...

Joomla! CMS 3.4.3 Cross Site Scripting Vulnerability

Joomla! CMS versions 3.4.0 through 3.4.3 suffer from a cross site scripting vulnerability. Exploit Title: Joomla! CMS 3.4.0-3.4.3 XSS Vulnerability Date: 2015-08-18 Exploit Author: cfreer email protected & 0keeteam Vendor Homepage: http://joomla.org Version: 3.4.0 through 3.4.3 Tested on:...

Joomla! 3.4.x < 3.4.4 Login Module XSS

According to its self-reported version number, the Joomla! installation running on the remote web server is 3.4.x prior to 3.4.4. It is, therefore, affected a cross-site XSS scripting vulnerability in the login module due to improper validation of user-supplied input. An unauthenticated, remote...

CVE-2014-7982

Cross-site scripting XSS vulnerability in Joomla! CMS 2.5.x before 2.5.19 and 3.x before 3.2.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-7983

Cross-site scripting XSS vulnerability in comcontact in Joomla! CMS 3.1.2 through 3.2.x before 3.2.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in Joomla! CMS 2.5.x before 2.5.19 and 3.x before 3.2.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in comcontact in Joomla! CMS 3.1.2 through 3.2.x before 3.2.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Sql injection

SQL injection vulnerability in Joomla! CMS 3.1.x and 3.2.x before 3.2.3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-7983

Cross-site scripting XSS vulnerability in comcontact in Joomla! CMS 3.1.2 through 3.2.x before 3.2.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-7982

CVE-2014-7982 covers a cross-site scripting (XSS) flaw in Joomla! CMS. Affected versions: Joomla! 2.5.x before 2.5.19 and 3.x before 3.2.3. The vulnerability allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The NVD entry assigns a CVSSv2 base score of 4.3 (M...

CVE-2014-7981

CVE-2014-7981 (Joomla! CMS) affects Joomla! 3.1.x and 3.2.x before 3.2.3. The vulnerability is a SQL injection in the weblinks-categories path due to improper input sanitization, allowing unauthenticated remote attackers to manipulate SQL and potentially disclose or modify data. Public references...

Joomla Artlinks Component <= 1.0b4 Remote Include Vulnerability

No description provided by source. .: insecurity research team :. ....:...:. . .:. | |/ :/ // :/ .:. : | | | \\ /\ / :. . ..: ||| / \ \ .: .:.. .. ./ .:/:. ./. .:/: . ...:. .advisory. .:... :..................: 18.o8.2oo6 .. Affected Application: Artlinks v1.0 Beta 4 Mambo/Joomla CMS...

Joomla Component com_articleman Upload Vulnerability

No description provided by source...

Joomla 3.2.1 /index.php SQL注入漏洞

No description provided by source...

Joomla 3.1.5 Cross Site Scripting

============================================================ - Original release date: August 05, 2013 - Discovered by: Emilio Pinna Application Security Analyst at Abinsula - Contact: emilio dot pinn at gmail dot com - Severity: 4.3/10 Base CVSS Score...

Joomla Nice Ajax Poll 1.3.0 SQL Injection

Title : Joomla comniceajaxpoll = 1.3.0 SQL Injection Vulnerability Author : Patrick de Brouwer - @knickz0r NLSecurity - www.nlsecurity.org Dork : inurl:"/index.php?option=comniceajaxpoll" Software : Joomla component Nice Ajax Poll = 1.3.0 http://dmitry.dn.ua/my-projects/304-nice-ajax-poll.html...

Joomla com_package - SQL Injection Vulnerability

Document Title: =============== Joomla compackage - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=652 Release Date: ============= 2012-07-07 Vulnerability Laboratory ID VL-ID: ==================================== 652 Common...

Joomla 1.5.26 ja_purity Cross Site Scripting

waraxe-2012-SA087 - Reflected XSS in Joomla 1.5.26 "japurity" template =============================================================================== Author: Janek Vind "waraxe" Date: 03. May 2012 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-87.html CVE:...

jNews 7.5.1 Information Disclosure

TITLE ....... jNews jnewscore7.5.1 information disclosure DATE ........ 07.04.2012 AUTOHR ...... http://hauntit.blogspot.com SOFT LINK ... http://joomla.org VERSION ..... 7.5.1 TESTED ON ... LAMP ----------------------------------------------------------------------- 1. What is this? 2. What is t...