CVE-2019-15120

CVE-2019-15120 استغلال لثغرة XSS عبر BBCode في إضافة Kunena قبل الإصدار 5.1.14 لجوملا! معلومات الوصف: في إضافة Kunena قبل الإصدار 5.1.14 لجوملا!، يمكن لأي مستخدم تنفيذ هجوم XSS مخزّن عن طريق إرسال رسالة خاصة في أي حقل يدعم BBCode. ونتيجة لذلك، يمكن أن تؤدي الثغرة بسهولة إلى تنفيذ تعليمات برمجية ع...

CVE-2024-5736

CVE-2024-5736 AdmirorFrames Joomla! एक्सटेंशन 5.0 - सर्वर-साइड रिक्वेस्ट फोर्जरी समयरेखा भेद्यता विक्रेता को सूचित की गई: 26.01.2024 नया फिक्स्ड 5.0 संस्करण जारी किया गया: 06.06.2024 सार्वजनिक प्रकटीकरण: 28.06.2024 विवरण AdmirorFrames Joomla! एक्सटेंशन में afGdStream.php फ़ाइल में सर्वर-साइड...

CVE-2023-27842

CVE-2023-27842 eXtplorer 2.1.15 – अप्रमाणित अनुमतियों के बाद दूरस्थ कोड निष्पादन प्रमाणित विक्रेता होमपेज: http://extplorer.net/ सॉफ़्टवेयर लिंक: http://extplorer.net/attachments/download/99/eXtplorer2.1.15.zip संस्करण: 2.1.15 स्थापना root@kitploit: git clone https://github.com/0xFTW/CVE-2023-278...

CVE-2026-65761

CVE-2026-65761 - إثبات المفهوم لثغرة حقن SQL في EasyStore Pro عبر filtersortby يوفر هذا المستودع إثبات مفهوم تعليميًا PoC لـ CVE-2026-65761، وهي ثغرة حقن SQL غير مصادق عليها تؤثر على الإصدارات من 1.0.0 حتى 2.0.2 شاملًا من امتداد EasyStore الخاص بـ Joomla. يتأثر الإصدار Pro فقط من الامتداد، نظرًا...

CVE-2024-5737

CVE-2024-5737 AdmirorFrames Joomla! एक्सटेंशन HTML टैग पर सेट हैं: root@kitploit: $height=0x3c; $im = imagecreate$width, $height; $hex=unpack'H',$payload; $chunks=strsplit$hex1, 6; for$i=0; $i count$chunks; $i++ $colorchunks=strsplit$chunks$i, 2;...

CVE-2024-5735

CVE-2024-5735 AdmirorFrames Joomla! एक्सटेंशन params'templatesBASE' = JPATHBASE . DIRECTORYSEPARATOR . 'plugins' . DIRECTORYSEPARATOR . 'content' . $path . 'templates' . DIRECTORYSEPARATOR;...

CVE-2026-78069

Joomla Extension - j2commerce.com - Missing authorization on Apps controller delegation chain in J2Store 1.0.0-3.3.21, 4.0.0-4.0.21, 4.1.0-4.1.6 - J2StoreControllerApps's appTask delegation path instantiates app-plugin controllers with no ACL check anywhere in the code. It currently returns 403...

CVE-2026-78080

Joomla Extension - feenders.de - Unauthenticated SQL injection in JooDatabase Lite 5.1.0 - The cid parameter is used in queries without validation, allowing SQLi vectors...

CVE-2026-78064

Joomla Extension - j2commerce.com - Anonymous cart-record tampering via inherited FOF save task in J2Store 1.0.0-3.3.21, 4.0.0-4.0.21, 4.1.0-4.1.6 - fof.xml grants the carts view's tasks a wildcard true ACL, and FOF only enforces CSRF tokens on back-end HTML requests, not on front-end format=raw...

EUVD-2026-70452

Joomla Extension - feenders.de - Unauthenticated SQL injection in JooDatabase Lite 5.1.0 - The cid parameter is used in queries without validation, allowing SQLi vectors...

CVE-2026-78080

CVE-2026-78080 affects the JooDatabase Lite Joomla extension (feenders.de), versions below 5.1.0 . The root cause is the cid parameter being used in database queries without input validation, enabling an unauthenticated SQL injection attack over the network with low complexity and no user interac...

CVE-2026-78000 Joomla Extension - j2commerce.com - Open redirect in cart controller in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5

Joomla Extension - j2commerce.com - Reflected XSS via filtertag, pricefrom and priceto in J2Store 1.0.0-3.3.21, 4.0.0-4.0.21, 4.1.0-4.1.6 - Four task handlers accepted a base64-encoded URL from user input and redirected to it without validating the destination host, enabling phishing using the...

EUVD-2026-70445

Joomla Extension - j2commerce.com - Missing authorization on Apps controller delegation chain in J2Store 1.0.0-3.3.21, 4.0.0-4.0.21, 4.1.0-4.1.6 - J2StoreControllerApps's appTask delegation path instantiates app-plugin controllers with no ACL check anywhere in the code. It currently returns 403...

CVE-2026-78069 Joomla Extension - j2commerce.com - Missing authorization on Apps controller delegation chain in J2Store 1.0.0-3.3.21, 4.0.0-4.0.21, 4.1.0-4.1.6

Joomla Extension - j2commerce.com - Missing authorization on Apps controller delegation chain in J2Store 1.0.0-3.3.21, 4.0.0-4.0.21, 4.1.0-4.1.6 - J2StoreControllerApps's appTask delegation path instantiates app-plugin controllers with no ACL check anywhere in the code. It currently returns 403...

CVE-2026-78069

CVE-2026-78069 affects the J2Store Joomla extension (by j2commerce.com), versions 1.0.0–3.3.21, 4.0.0–4.0.21, and 4.1.0–4.1.6 . The root cause is a missing authorization check in the J2StoreControllerApps appTask delegation path, which instantiates app-plugin controllers with no deliberate ACL ch...

CVE-2026-78065

CVE-2026-78065 affects the J2Store Joomla extension (j2commerce.com), versions 1.0.0–3.3.21 , 4.0.0–4.0.21 , and 4.1.0–4.1.6 . The flaw is in the editAddress() function: its ownership check only redirected non-owners when the loaded address row had a non-empty user_id belonging to another user. S...

CVE-2026-78065 Joomla Extension - j2commerce.com - Guest checkout address disclosure to any authenticated user (IDOR) in J2Store 1.0.0-3.3.21, 4.0.0-4.0.21, 4.1.0-4.1.6

Joomla Extension - j2commerce.com - Guest checkout address disclosure to any authenticated user IDOR in J2Store 1.0.0-3.3.21, 4.0.0-4.0.21, 4.1.0-4.1.6 - editAddress redirected non-owners away only when the loaded address row had a non-empty userid belonging to someone else. Guest-checkout addres...

EUVD-2026-70415

Joomla Extension - j2commerce.com - Unauthenticated PayPal callback forgery leading to order confirmation fraud in J2Store 1.0.0-3.3.21, 4.0.0-4.0.21, 4.1.0-4.1.6 - The PayPal IPN listener's signature check validateIPN accepted UNVERIFIED and any non-INVALID response as valid, made its verificati...

EUVD-2026-70414

Joomla Extension - j2commerce.com - Anonymous cart-record tampering via inherited FOF save task in J2Store 1.0.0-3.3.21, 4.0.0-4.0.21, 4.1.0-4.1.6 - fof.xml grants the carts view's tasks a wildcard true ACL, and FOF only enforces CSRF tokens on back-end HTML requests, not on front-end format=raw...

CVE-2026-78064

CVE-2026-78064 affects the J2Store Joomla extension (j2commerce.com) in versions 1.0.0–3.3.21, 4.0.0–4.0.21, and 4.1.0–4.1.6 . The vulnerability stems from fof.xml granting the carts view a wildcard true ACL, while FOF enforces CSRF tokens only on back-end HTML requests—not on front-end format=ra...