155 matches found
Joomla! Component Ek Rishta 2.9 - SQL Injection
Joomla! Component Ek Rishta 2.9 - SQL Injection Exploit Title: Joomla! Component Ek Rishta 2.9 - SQL Injection Dork: N/A Date: 22.02.2018 Vendor Homepage: https://www.joomlaextensions.co.in/ Software Link: https://extensions.joomla.org/extensions/extension/living/dating-a-relationships/ek-rishta/...
CVE-2015-5608
Open redirect vulnerability in Joomla! CMS 3.0.0 through 3.4.1...
Open redirect
Open redirect vulnerability in Joomla! CMS 3.0.0 through 3.4.1...
CVE-2015-5608
CVE-2015-5608 affects Joomla! CMS 3.0.0 through 3.4.1 and is an open redirect vulnerability. The issue stems from inadequate validation of script parameters/return value, enabling redirection to an arbitrary external site when a user follows a crafted link. Exploitation details aren’t provided in...
LMS King Professional Component SQL Injection Vulnerability in Joomla!
Joomla! is an open source, cross-platform content management system developed using PHP and MySQL. A SQL injection vulnerability exists in the cpid parameter in Joomla! LMS King Professional, which can be exploited by attackers to access or modify database data...
Cross site request forgery (csrf)
Missing CSRF token checks and improper input validation in Joomla! CMS 1.7.3 through 3.7.2 lead to an XSS vulnerability...
Input validation
Improper cache invalidation in Joomla! CMS 1.7.3 through 3.7.2 leads to disclosure of form contents...
CVE-2017-9934
Missing CSRF token checks and improper input validation in Joomla! CMS 1.7.3 through 3.7.2 lead to an XSS vulnerability...
CVE-2017-9933
Improper cache invalidation in Joomla! CMS 1.7.3 through 3.7.2 leads to disclosure of form contents...
CVE-2017-9934
Missing CSRF token checks and improper input validation in Joomla! CMS 1.7.3 through 3.7.2 lead to an XSS vulnerability...
CVE-2017-9934
CVE-2017-9934 is a Joomla! XSS vulnerability described as missing CSRF token checks and improper input validation, affecting Joomla! versions 1.7.3 through 3.7.2. The connected records corroborate an XSS flaw arising from input validation issues (notably in the context of multibyte input) and ref...
Joomla! cross-site scripting vulnerability (CNVD-2017-22326)
Joomla! CMS is a U.S. Open Source Matters team developed a set of open source content management system CMS. The system provides RSS feeds , site search and other functions . A cross-site scripting vulnerability exists in Joomla! CMS versions 1.7.3 to 3.7.2, which stems from a lack of cross-site...
Joomla com_publication component 'sid' parameter SQL injection vulnerability
Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the 'sid' parameter of the Joomla compublication component. An attacker can exploit the vulnerability to access or modify database data...
CMS File Upload Vulnerability
Joomla! CMS is a U.S. Open Source Matters team developed a set of open source content management system CMS. The system provides RSS feeds , site search and other functions . A file upload vulnerability exists in the file scanning mechanism in the 'JFilterInput::isFileSafe' function in Joomla! CM...
CVE-2016-9836
The file scanning mechanism of JFilterInput::isFileSafe in Joomla! CMS before 3.6.5 does not consider alternative PHP file extensions when checking uploaded files for PHP content, which enables a user to upload and execute files with the .php6, .php7, .phtml, and .phpt extensions. Additionally,...
CVE-2016-9836
The file scanning mechanism of JFilterInput::isFileSafe in Joomla! CMS before 3.6.5 does not consider alternative PHP file extensions when checking uploaded files for PHP content, which enables a user to upload and execute files with the .php6, .php7, .phtml, and .phpt extensions. Additionally,...
CVE-2016-9836
CVE-2016-9836 affects Joomla! CMS versions up to 3.6.4 (self-reported). The file scanning in JFilterInput::isFileSafe() fails to consider alternative PHP extensions (e.g., .php6, .php7, .phtml, .phpt) when validating uploaded files, enabling execution of uploaded PHP content. Additionally, JHelpe...
Joomla Extra Search 2.2.8 SQL Injection
Exploit Title : Joomla comextrasearch SQL injection Vulnerability Exploit Author : howucan Website : http://howucan.gr Dork : inurl:/index.php?option=comextrasearch establename Software link : http://www.joomlaboat.com/extra-search Software version : 2.2.8 video : http://adf.ly/1cmGen Tested on:...
