19113 matches found
CVE-2026-76564
XSS memorizzato tramite User-Agent nella vista dell'ordine dell'amministratore in PhocaCart PhocaCart ≤ 6.1.7 — Un attaccante non autenticato memorizza un payload XSS tramite il checkout. Si esegue nel contesto del browser dell'amministratore SOMMARIO PhocaCart 6.1.7 per Joomla memorizza l'header...
CVE-2026-66917
IDOR + XSS المخزّن عبر كسر التفويض على مستوى الكائن في JoomGallery JoomGallery ≤ 4.3.0 — مستخدم بدور المحرر يختطف أي صورة في المعرض ويخزّن حمولة XSS، مما يتيح الاستيلاء على جلسة المسؤول الملخص تتحقق الدالة UserimageController::save في JoomGallery من checkACL'edit', ... بدلاً من checkACL'edit.own'...
exploit-CVE-2023-23752
Joomla! divulgazione di informazioni - Exploit CVE-2023-23752 Joomla! 4.2.8 - Divulgazione di informazioni non autenticata Exploit per CVE-2023-23752 4.0.0 = Joomla = 4.2.7. EDB-51334 PacketStorm WLB-TODO Utilizzo Esempio Requisiti httpx docopt.rb paint Esempio utilizzando gem: root@kitploit: gem...
CVE-2026-77995
Joomla Extension - miniorange.com - Arbitrary account takeover in miniOrange OAuth Client 3.2.0 - The manipulation of a cookie value allows actors to login as arbitrary accounts, including admins...
EUVD-2026-64844
Joomla Extension - miniorange.com - Arbitrary account takeover in miniOrange OAuth Client 3.2.0 - The manipulation of a cookie value allows actors to login as arbitrary accounts, including admins...
CVE-2026-77995 Joomla Extension - miniorange.com - Arbitrary account takeover in miniOrange OAuth Client < 3.2.0
Joomla Extension - miniorange.com - Arbitrary account takeover in miniOrange OAuth Client 3.2.0 - The manipulation of a cookie value allows actors to login as arbitrary accounts, including admins...
CVE-2026-77995 Joomla Extension - miniorange.com - Arbitrary account takeover in miniOrange OAuth Client < 3.2.0
Joomla Extension - miniorange.com - Arbitrary account takeover in miniOrange OAuth Client 3.2.0 - The manipulation of a cookie value allows actors to login as arbitrary accounts, including admins...
CVE-2026-77995
CVE-2026-77995 is an arbitrary account takeover vulnerability in the miniOrange OAuth Client Joomla extension, affecting versions prior to 3.2.0 . The flaw is caused by the manipulation of a cookie value , allowing an unauthenticated attacker to log in as any account on the site, including admini...
CVE-2026-48907
CVE-2026-48907 - Joomla! JCE RCE não autenticada Joomla! JCE extension 2.9.99.5 - Upload Arbitrário de Arquivo PHP e Execução Remota de Código não autenticados 🔎 Consultas em Mecanismos de Busca Shodan...
CVE-2026-56291
Versione di scansione automatica ed Exploit CVE-2026-56291 POC Joomla Upload arbitrario di file non autenticato che porta a RCE in Balbooa Forms FOFA / Shodan FOFA: body="combaforms" Shodan: http.html:"baforms"...
CVE-2026-77994
Joomla Extension - joomlack.fr - Second order SQL injection in Page Builder CK 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a SQL injection issue related to the loadStyles method of the frontend page model...
CVE-2026-77993
Joomla Extension - joomlack.fr - Reflected XSS in Page Builder CK 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a reflected XSS via the iscontenttype parameter...
CVE-2026-77993
The Joomla extension Page Builder CK (joomlack.fr) is affected by a reflected cross-site scripting (XSS) vulnerability via the iscontenttype parameter in versions prior to 3.6.5 . An attacker can craft a malicious URL that, when visited by a user, executes arbitrary script in the victim's browser...
CVE-2026-77993 Joomla Extension - joomlack.fr - Reflected XSS in Page Builder CK < 3.6.5
Joomla Extension - joomlack.fr - Reflected XSS in Page Builder CK 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a reflected XSS via the iscontenttype parameter...
CVE-2026-77993 Joomla Extension - joomlack.fr - Reflected XSS in Page Builder CK < 3.6.5
Joomla Extension - joomlack.fr - Reflected XSS in Page Builder CK 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a reflected XSS via the iscontenttype parameter...
EUVD-2026-64751
Joomla Extension - joomlack.fr - Reflected XSS in Page Builder CK 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a reflected XSS via the iscontenttype parameter...
CVE-2026-77994 Joomla Extension - joomlack.fr - Second order SQL injection in Page Builder CK < 3.6.5
Joomla Extension - joomlack.fr - Second order SQL injection in Page Builder CK 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a SQL injection issue related to the loadStyles method of the frontend page model...
EUVD-2026-64750
Joomla Extension - joomlack.fr - Second order SQL injection in Page Builder CK 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a SQL injection issue related to the loadStyles method of the frontend page model...
CVE-2026-77994 Joomla Extension - joomlack.fr - Second order SQL injection in Page Builder CK < 3.6.5
Joomla Extension - joomlack.fr - Second order SQL injection in Page Builder CK 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a SQL injection issue related to the loadStyles method of the frontend page model...