Lucene search
+L

36 matches found

Nuclei
Nuclei
added 2026/08/31 5:18 a.m.12 views

Page Builder CK <= 3.5.10 - Unauthenticated Arbitrary File Upload

Joomla Page Builder CK contains an unrestricted file upload vulnerability caused by lack of proper validation, letting unauthenticated attackers upload executable files and achieve remote code execution. id: CVE-2026-56290 info: name: Page Builder CK = 3.5.10 - Unauthenticated Arbitrary File Uplo...

10CVSS7.6AI score0.30375EPSS
SaveExploits6References4
Kitploit
Kitploit
added 2026/08/31 3:27 a.m.2 views

PageBuilderCK-CVE-2026-56290-Exploit

Page Builder CK — fonts.save RCE Probe CVE-2026-56290 BlackHat Team proof-of-concept scanner for the Joomla Page Builder CK fonts.save vulnerability. POC CVE-2026-56290 Author: @mrzblackhat Team: BlackHat Team Credits: Peyman Siyahi · MR.PERSIA Overview This tool probes Joomla sites running the...

10CVSS7.5AI score0.30375EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/08/31 2:27 a.m.4 views

pbck-exploit

Mass Exploitation & Validation Framework for Joomla Page Builder CK Unauthenticated Arbitrary File Upload → Remote Code Execution 📑 Table of Contents Vulnerability Overview Affected Versions Features Installation Usage Proof of Concept Technical Deep-Dive Detection Methodology Defense & Mitigatio...

10CVSS7.5AI score0.30375EPSS
SaveExploits6
NVD
NVD
added 2026/08/24 8:16 a.m.18 views

CVE-2026-77994

Joomla Extension - joomlack.fr - Second order SQL injection in Page Builder CK 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a SQL injection issue related to the loadStyles method of the frontend page model...

9.3CVSS0.00228EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/24 8:16 a.m.12 views

CVE-2026-77993

Joomla Extension - joomlack.fr - Reflected XSS in Page Builder CK 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a reflected XSS via the iscontenttype parameter...

5.3CVSS0.00258EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/24 8:00 a.m.20 views

CVE-2026-77993

The Joomla extension Page Builder CK (joomlack.fr) is affected by a reflected cross-site scripting (XSS) vulnerability via the iscontenttype parameter in versions prior to 3.6.5 . An attacker can craft a malicious URL that, when visited by a user, executes arbitrary script in the victim's browser...

5.3CVSS5.2AI score0.00258EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/24 8:00 a.m.43 views

CVE-2026-77993 Joomla Extension - joomlack.fr - Reflected XSS in Page Builder CK < 3.6.5

Joomla Extension - joomlack.fr - Reflected XSS in Page Builder CK 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a reflected XSS via the iscontenttype parameter...

5.3CVSS0.00258EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/08/24 8:00 a.m.7 views

CVE-2026-77993 Joomla Extension - joomlack.fr - Reflected XSS in Page Builder CK < 3.6.5

Joomla Extension - joomlack.fr - Reflected XSS in Page Builder CK 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a reflected XSS via the iscontenttype parameter...

5.3CVSS5.3AI score0.00258EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/24 8:00 a.m.12 views

EUVD-2026-64751

Joomla Extension - joomlack.fr - Reflected XSS in Page Builder CK 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a reflected XSS via the iscontenttype parameter...

5.3CVSS5.2AI score0.00258EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/08/24 7:55 a.m.10 views

CVE-2026-77994 Joomla Extension - joomlack.fr - Second order SQL injection in Page Builder CK < 3.6.5

Joomla Extension - joomlack.fr - Second order SQL injection in Page Builder CK 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a SQL injection issue related to the loadStyles method of the frontend page model...

9.3CVSS5.8AI score0.00228EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/24 7:55 a.m.11 views

EUVD-2026-64750

Joomla Extension - joomlack.fr - Second order SQL injection in Page Builder CK 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a SQL injection issue related to the loadStyles method of the frontend page model...

9.3CVSS5.7AI score0.00228EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/24 7:55 a.m.47 views

CVE-2026-77994 Joomla Extension - joomlack.fr - Second order SQL injection in Page Builder CK < 3.6.5

Joomla Extension - joomlack.fr - Second order SQL injection in Page Builder CK 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a SQL injection issue related to the loadStyles method of the frontend page model...

9.3CVSS0.00228EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/24 7:55 a.m.34 views

CVE-2026-77994

Page Builder CK (version

9.3CVSS5.7AI score0.00228EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/17 6:18 p.m.19 views

CVE-2026-74254

Joomla Extension - joomlack.fr - SQL injection in Page Builder CK 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a SQL injection issue related to the styles model. Version 3.6.4 fixed the vector in the frontend, 3.6.5 in the backend...

9.3CVSS0.00281EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/17 5:10 p.m.12 views

EUVD-2026-60304

Joomla Extension - joomlack.fr - SQL injection in Page Builder CK 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a SQL injection issue related to the styles model. Version 3.6.4 fixed the vector in the frontend, 3.6.5 in the backend...

9.3CVSS5.8AI score0.00281EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/08/17 5:10 p.m.13 views

CVE-2026-74254 Joomla Extension - joomlack.fr - SQL injection in Page Builder CK < 3.6.5

Joomla Extension - joomlack.fr - SQL injection in Page Builder CK 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a SQL injection issue related to the styles model. Version 3.6.4 fixed the vector in the frontend, 3.6.5 in the backend...

9.3CVSS5.7AI score0.00281EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/08/17 5:10 p.m.18 views

CVE-2026-74254

Joomla Extension - joomlack.fr - SQL injection in Page Builder CK 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a SQL injection issue related to the styles model. Version 3.6.4 fixed the vector in the frontend, 3.6.5 in the backend...

9.3CVSS5.8AI score0.00281EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2026/08/17 5:10 p.m.37 views

CVE-2026-74254 Joomla Extension - joomlack.fr - SQL injection in Page Builder CK < 3.6.5

Joomla Extension - joomlack.fr - SQL injection in Page Builder CK 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a SQL injection issue related to the styles model. Version 3.6.4 fixed the vector in the frontend, 3.6.5 in the backend...

9.3CVSS0.00281EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/17 5:10 p.m.50 views

CVE-2026-74254

CVE-2026-74254 is a SQL injection vulnerability in the Page Builder CK Joomla extension (by joomlack.fr), specifically in the styles model . The flaw allows an unauthenticated, remote attacker to interfere with database queries, potentially leading to data exfiltration, modification, or service d...

9.3CVSS5.7AI score0.00281EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/08/17 12:00 a.m.13 views

PT-2026-76727

Name of the Vulnerable Software and Affected Versions Page Builder CK versions prior to 3.6.5 Description The Page Builder CK extension for Joomla contains a SQL injection flaw within the styles model. This issue allows an attacker to interfere with the queries that an application makes to its...

9.3CVSS5.5AI score0.00281EPSS
SaveExploits0References5
Rows per page
Query Builder