Joomla com_publication component 'sid' parameter SQL injection vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the 'sid' parameter of the Joomla compublication component. An attacker can exploit the vulnerability to access or modify database data...

CMS File Upload Vulnerability

Joomla! CMS is a U.S. Open Source Matters team developed a set of open source content management system CMS. The system provides RSS feeds , site search and other functions . A file upload vulnerability exists in the file scanning mechanism in the 'JFilterInput::isFileSafe' function in Joomla! CM...

CVE-2016-9836

The file scanning mechanism of JFilterInput::isFileSafe in Joomla! CMS before 3.6.5 does not consider alternative PHP file extensions when checking uploaded files for PHP content, which enables a user to upload and execute files with the .php6, .php7, .phtml, and .phpt extensions. Additionally,...

CVE-2016-9836

The file scanning mechanism of JFilterInput::isFileSafe in Joomla! CMS before 3.6.5 does not consider alternative PHP file extensions when checking uploaded files for PHP content, which enables a user to upload and execute files with the .php6, .php7, .phtml, and .phpt extensions. Additionally,...

CVE-2016-9836

CVE-2016-9836 affects Joomla! CMS versions up to 3.6.4 (self-reported). The file scanning in JFilterInput::isFileSafe() fails to consider alternative PHP extensions (e.g., .php6, .php7, .phtml, .phpt) when validating uploaded files, enabling execution of uploaded PHP content. Additionally, JHelpe...

Joomla Extra Search 2.2.8 SQL Injection

Exploit Title : Joomla comextrasearch SQL injection Vulnerability Exploit Author : howucan Website : http://howucan.gr Dork : inurl:/index.php?option=comextrasearch establename Software link : http://www.joomlaboat.com/extra-search Software version : 2.2.8 video : http://adf.ly/1cmGen Tested on:...

Joomla com_music SQL injection vulnerability

No description provided by source...

Joomla com_branch SQL注入漏洞

No description provided by source...

Joomla Jumi 3.0.5 Cross Site Scripting

No description provided by source...

Joomla com_jotloader - Full Path Disclosure Vulnerability

No description provided by source...

Joomla CMS 'login' Module XSS Vulnerability

Joomla is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:joomla:joomla";...

Joomla! CMS 3.4.3 Cross Site Scripting Vulnerability

Joomla! CMS versions 3.4.0 through 3.4.3 suffer from a cross site scripting vulnerability. Exploit Title: Joomla! CMS 3.4.0-3.4.3 XSS Vulnerability Date: 2015-08-18 Exploit Author: cfreer email protected & 0keeteam Vendor Homepage: http://joomla.org Version: 3.4.0 through 3.4.3 Tested on:...

Joomla! 3.4.x < 3.4.4 Login Module XSS

According to its self-reported version number, the Joomla! installation running on the remote web server is 3.4.x prior to 3.4.4. It is, therefore, affected a cross-site XSS scripting vulnerability in the login module due to improper validation of user-supplied input. An unauthenticated, remote...

CVE-2014-7982

Cross-site scripting XSS vulnerability in Joomla! CMS 2.5.x before 2.5.19 and 3.x before 3.2.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-7983

Cross-site scripting XSS vulnerability in comcontact in Joomla! CMS 3.1.2 through 3.2.x before 3.2.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in Joomla! CMS 2.5.x before 2.5.19 and 3.x before 3.2.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Sql injection

SQL injection vulnerability in Joomla! CMS 3.1.x and 3.2.x before 3.2.3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in comcontact in Joomla! CMS 3.1.2 through 3.2.x before 3.2.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-7981

CVE-2014-7981 (Joomla! CMS) affects Joomla! 3.1.x and 3.2.x before 3.2.3. The vulnerability is a SQL injection in the weblinks-categories path due to improper input sanitization, allowing unauthenticated remote attackers to manipulate SQL and potentially disclose or modify data. Public references...

CVE-2014-7982

CVE-2014-7982 covers a cross-site scripting (XSS) flaw in Joomla! CMS. Affected versions: Joomla! 2.5.x before 2.5.19 and 3.x before 3.2.3. The vulnerability allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The NVD entry assigns a CVSSv2 base score of 4.3 (M...