90 matches found
CVE-2019-15120
The Kunena extension before 5.1.14 for Joomla! allows XSS via BBCode...
Cross site scripting
The Kunena extension before 5.1.14 for Joomla! allows XSS via BBCode...
CVE-2019-15120
The Kunena extension before 5.1.14 for Joomla! allows XSS via BBCode...
CVE-2019-15120
The CVE covers Kunena (Joomla! extension) prior to version 5.1.14. The issue is a stored XSS via BBCode in Kunena messages which is exploitable by normal user input in any BBCode-enabled field. Exploit documentation notes that this XSS can lead to remote code execution. Affected product/version: ...
PT-2019-13999 · Joomla · Kunena
Name of the Vulnerable Software and Affected Versions: Kunena extension versions prior to 5.1.14 for Joomla! Description: The issue allows for XSS via BBCode, which can be exploited to execute malicious scripts. Recommendations: For versions prior to 5.1.14, update to version 5.1.14 or later to...
kunena, 5.0.x - 5.1.14 ,XSS (Cross Site Scripting)
kunena, 5.0.x - 5.1.14 ,XSS Cross Site Scripting Developer statement https://www.kunena.org/blog/207-kunena-5-1-14-released...
kunena, ,XSS (Cross Site Scripting)
kunena,5.1.3,XSS Cross Site Scripting...
Kunena,5.1.9,XSS (Cross Site Scripting)
Kunena,5.1.9,XSS Cross Site Scripting https://www.kunena.org/blog/203-kunena-5-1-10-released...
kunena,5.1.7,XSS (Cross Site Scripting)
kunena,5.1.7,XSS Cross Site Scripting https://www.kunena.org/blog/201-kunena-5-1-8-released...
Joomla Kunena 5.1.7 Database Disclosure
Exploit Title : Joomla Kunena Components 5.1.7 Database Backup Disclosure Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 02/12/2018 Vendor Homepage : extensions.joomla.org/extension/kunena/ Software Download Link : kunena.org/download Tested On : Windows and Linu...
kunena,5.1.6.1,XSS (Cross Site Scripting)
kunena,5.1.6.1,XSS Cross Site Scripting Developer statement: Update to 5.1.7 https://www.kunena.org/blog/200-kunena-5-1-7-released...
kunena,5.1.4,Other
kunena,5.1.4,Other statement post: https://www.kunena.org/blog/198-kunena-5-1-5-released...
Kunena,5.0 - 5.1.1,Other
Kunena,5.0 - 5.1.1,Other Developer statement The Kunena team has announce the arrival of Kunena 5.1.2 K 5.1.2 which is now available for download as a native Joomla extension for J! 3.8.x. This version addresses most of the issues that were discovered in K 5.1 and issues discovered during the...
Kunena,3.x - 5.0.13, Other
Kunena, 3.x - 5.0.13, Other - Normal user can take ownership from any user resolution: update to 5.0.14 update notice: https://www.kunena.org/blog/191-kunena-5-0-14-released...
Kunena 5.0.8 and previous XSS
Kunena 5.0.8 and previous, cross-site scripting XSS Resolution: update to 5.0.9 Update notice: https://www.kunena.org/blog/185-kunena-5-0-9-released...
Cross-site Scripting Vulnerability in Joomla! Kunena Component
Joomla! is an open source content management system CMS developed by the OpenSourceMatters team in the U.S. The system provides RSS feeds, site search, etc. Kunena is one of the forum components. A cross-site scripting vulnerability exists in versions 5.0.2 to 5.0.4 of the Kunena component of...
Kunena Forum Extension for Joomla Detection (HTTP)
Detection of the Kunena forum extension for Joomla. The script sends a HTTP request to the server and attempts to extract the version from the reply. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respectiv...
Kunena Forum Extension 'CVE-2009-4550' SQL Injection Vulnerability
the Kunena Forum Extension for Joomla is prone to a SQL injection vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Joomla Kunena Forum Extension < 3.0.6 Multiple Vulnerabilities
The Kunena Forum Extension for Joomla is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Kunena Forum Extension 'message subject' Cross Site Scripting Vulnerability
the Kunena Forum Extension for Joomla is prone to a cross-site scripting vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...