EUVD-2019-15830

Malware in sbrugna...

CVE-2019-6264

An issue was discovered in Joomla! before 3.9.2. Inadequate escaping in modbanners leads to a stored XSS vulnerability...

Cross site scripting

An issue was discovered in Joomla! before 3.9.2. Inadequate escaping in modbanners leads to a stored XSS vulnerability...

CVE-2019-6264

An issue was discovered in Joomla! before 3.9.2. Inadequate escaping in modbanners leads to a stored XSS vulnerability...

CVE-2019-6264

Joomla! prior to 3.9.2 is affected by a stored XSS in mod_banners due to inadequate escaping (also reflected in related Nessus/OpenVAS findings for Joomla! components). The issue allows injection of script/HTML via the affected banner component and is described across multiple sources as a stored...

CVE-2019-6264

An issue was discovered in Joomla! before 3.9.2. Inadequate escaping in modbanners leads to a stored XSS vulnerability...

Joomla! 2.5.x < 3.9.2 Multiple Vulnerabilities

According to its self-reported version number, the detected Joomla! application is affected by multiple vulnerabilities : - Stored XSS in modbanners affects Joomla 2.5.0 through 3.9.1 - Stored XSS in comcontact affects Joomla 2.5.0 through 3.9.1 - Stored XSS issue in the Global Configuration...

CVE-2019-6264: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Joomla! before 3.9.2. Inadequate escaping in modbanners leads to a stored XSS vulnerability...

joomla3 -- vulnerabilitiesw

JSST reports: Inadequate escaping in modbanners leads to a stored XSS vulnerability. Inadequate escaping in comcontact leads to a stored XSS vulnerability Inadequate checks at the Global Configuration Text Filter settings allowed a stored XSS. Inadequate checks at the Global Configuration helpurl...

[20190101] - Core - Stored XSS in mod_banners

Inadequate escaping in modbanners leads to a stored XSS vulnerability...

CVE-2007-3250

SQL injection vulnerability in modbanners.php in Elxis CMS before 2006.4 20070613 allows remote attackers to execute arbitrary SQL commands via the mbtracker cookie. NOTE: the product was patched without updating the version number; later downloads of 2006.4 are not affected...