Joomla! SQL注入漏洞

Joomla! is a free, open source content management system from Joomla! open source. A SQL injection vulnerability exists in Joomla! versions 3.9.2-3.10.1, which originates from a privileged user being able to execute arbitrary SQL commands, potentially resulting in a SQL injection attack...

Joomla! 代码问题漏洞

Joomla! is a free, open source content management system from Joomla! A code issue vulnerability exists in Joomla! versions 1.0.0-4.0.0 and 5.0.0-5.0.1, which stems from a flaw in the decompression feature that could lead to remote code execution...

PT-2025-33480 · Unknown · Phoca Commander

Name of the Vulnerable Software and Affected Versions: Phoca Commander versions 1.0.0 through 4.0.0 Phoca Commander versions 5.0.0 through 5.0.1 Description: An authenticated remote code execution issue exists in Phoca Commander for Joomla. The issue allows code execution via the unzip feature...

Joomla! SQL注入漏洞

Joomla! is a free, open source content management system from Joomla! open source. A SQL injection vulnerability exists in Joomla! versions 1.3.2 through 1.4.4. The vulnerability stems from the ability of a low-privileged user to execute arbitrary SQL commands, which can lead to SQL injection...

PT-2025-33482 · Joomla +1 · Joomla! +1

Name of the Vulnerable Software and Affected Versions: JS Jobs plugin versions 1.3.2 through 1.4.4 Description: A SQL injection vulnerability in the JS Jobs plugin for Joomla allows low-privilege users to execute arbitrary SQL commands. Recommendations: Update the JS Jobs plugin to a version late...

[20250901] - Core - Inadequate content filtering within the checkAttribute filter code

Inadequate content filtering within the checkAttribute methods leads to XSS vulnerabilities in various components...

Exploit for Improper Access Control in Joomla Joomla\!

PoCs This repo contains proof of concept exploits for vulnera...

Exploit for Improper Access Control in Joomla Joomla\!

PoCs This repo contains proof of concept exploits for vulnera...

CVE-2025-54298

A stored XSS vulnerability in CommentBox component 1.0.0-1.1.0 for Joomla was discovered...

CVE-2025-54299

A stored XSS vulnerability in No Boss Testimonials component 1.0.0-3.0.0 and 4.0.0-4.0.2 for Joomla was discovered...

CVE-2025-54299

A stored XSS vulnerability in No Boss Testimonials component 1.0.0-3.0.0 and 4.0.0-4.0.2 for Joomla was discovered...

CVE-2025-54298

A stored XSS vulnerability in CommentBox component 1.0.0-1.1.0 for Joomla was discovered...

CVE-2025-54299 Extension - nobossextensions.com - Stored XSS vulnerability in No Boss Testimonials component 1.0.0-3.0.0 and 4.0.0-4.0.2 for Joomla

A stored XSS vulnerability in No Boss Testimonials component 1.0.0-3.0.0 and 4.0.0-4.0.2 for Joomla was discovered...

CVE-2025-54299

CVE-2025-54299 is a stored Cross-Site Scripting (XSS) vulnerability in the No Boss Testimonials component for Joomla. Affects No Boss Testimonials versions 1.0.0–3.0.0 and 4.0.0–4.0.2. Root cause is stored XSS that allows injection of malicious scripts into the application, potentially compromisi...

CVE-2025-54299 Extension - nobossextensions.com - Stored XSS vulnerability in No Boss Testimonials component 1.0.0-3.0.0 and 4.0.0-4.0.2 for Joomla

A stored XSS vulnerability in No Boss Testimonials component 1.0.0-3.0.0 and 4.0.0-4.0.2 for Joomla was discovered...

CVE-2025-54298 Extension - firecoders.com - Stored XSS vulnerability in CommentBox component 1.0.0-1.1.0 for Joomla

A stored XSS vulnerability in CommentBox component 1.0.0-1.1.0 for Joomla was discovered...

CVE-2025-54298

CVE-2025-54298 affects the Firecoders/CommentBox Joomla component, specifically versions 1.0.0–1.1.0, with a stored XSS vulnerability in the CommentBox component. The issue is described as a stored XSS that can impact confidentiality, integrity, and availability, with high/critical risk indicator...

CVE-2025-54298 Extension - firecoders.com - Stored XSS vulnerability in CommentBox component 1.0.0-1.1.0 for Joomla

A stored XSS vulnerability in CommentBox component 1.0.0-1.1.0 for Joomla was discovered...

No Boss Extensions No Boss Testimonials component for Joomla 跨站脚本漏洞

No Boss Extensions No Boss Testimonials component for Joomla is a Joomla plugin from Brazilian company No Boss Extensions. A cross-site scripting vulnerability exists in the No Boss Extensions No Boss Testimonials component for Joomla versions 1.0.0 through 3.0.0 and 4.0.0 through 4.0.2, which...

Firecoders Joomla component CommentBox 跨站脚本漏洞

Firecoders Joomla component CommentBox is a Joomla commenting component from Firecoders Greece. A cross-site scripting vulnerability exists in Firecoders Joomla component CommentBox versions 1.0.0 through 1.1.0, which stems from vulnerability to stored cross-site scripting attacks...