46 matches found
CVE-2021-23131 [20210305] - Core - Input validation within the template manager
An issue was discovered in Joomla! 3.2.0 through 3.9.24. Missing input validation within the template manager...
PT-2021-15386 · Joomla · Joomla!
Name of the Vulnerable Software and Affected Versions: Joomla! versions 3.2.0 through 3.9.24 Description: An issue was discovered in the template manager due to missing input validation. Recommendations: For versions 3.2.0 through 3.9.24, update to a version that includes input validation in the...
CVE-2021-23131
An issue was discovered in Joomla! 3.2.0 through 3.9.24. Missing input validation within the template manager...
[20210305] - Core - Input validation within the template manager
Missing input validation within the template manager...
CVE-2020-10667
The web application exposed by the Canon Oce Colorwave 500 4.0.0.0 printer is vulnerable to Stored XSS in /TemplateManager/indexExternalLocation.jsp. The vulnerable parameter is maptemplatename. NOTE: this is fixed in the latest version...
CVE-2020-10667
The web application exposed by the Canon Oce Colorwave 500 4.0.0.0 printer is vulnerable to Stored XSS in /TemplateManager/indexExternalLocation.jsp. The vulnerable parameter is maptemplatename. NOTE: this is fixed in the latest version...
Joomla! 1.5.x < 3.7.0 Multiple Vulnerabilities
According to its self-reported version number, the detected Joomla! application is affected by multiple vulnerabilities : - A flaw exists in the JMail API due to PHPMail version information being included in mail headers. An unauthenticated, remote attacker can exploit this to disclose sensitive...
Joomla! 2.5.x < 3.7.0 Multiple Vulnerabilities
According to its self-reported version number, the detected Joomla! application is affected by multiple vulnerabilities : - A flaw exists in the JMail API due to PHPMail version information being included in mail headers. An unauthenticated, remote attacker can exploit this to disclose sensitive...
Joomla! 3.5.x < 3.7.0 Multiple Vulnerabilities
According to its self-reported version number, the detected Joomla! application is affected by multiple vulnerabilities : - A flaw exists in the JMail API due to PHPMail version information being included in mail headers. An unauthenticated, remote attacker can exploit this to disclose sensitive...
Joomla! 1.7.x < 3.7.0 Multiple Vulnerabilities
According to its self-reported version number, the detected Joomla! application is affected by multiple vulnerabilities : - A flaw exists in the JMail API due to PHPMail version information being included in mail headers. An unauthenticated, remote attacker can exploit this to disclose sensitive...
Joomla! cross-site scripting vulnerability (CNVD-2017-06581)
Joomla! is the U.S. Open Source Matters team of a set of PHP and MySQL development using open source , cross-platform content management system CMS. A cross-site scripting vulnerability exists in Joomla! versions 3.2.0 through 3.6.5. The vulnerability arises due to insufficient escaping of file a...
CVE-2017-7987
In Joomla! 3.2.0 through 3.6.5 fixed in 3.7.0, inadequate escaping of file and folder names leads to XSS vulnerabilities in the template manager component...
Cross site scripting
In Joomla! 3.2.0 through 3.6.5 fixed in 3.7.0, inadequate escaping of file and folder names leads to XSS vulnerabilities in the template manager component...
Design/Logic Flaw
In Joomla! 3.2.0 through 3.6.5 fixed in 3.7.0, inadequate filtering leads to XSS in the template manager component...
CVE-2017-7987
In Joomla! 3.2.0 through 3.6.5 fixed in 3.7.0, inadequate escaping of file and folder names leads to XSS vulnerabilities in the template manager component...
CVE-2017-7987
CVE-2017-7987 affects Joomla! templates manager: the vulnerability arises from inadequate escaping of file and folder name input, enabling a stored/transient XSS when processing template names. Affected versions are Joomla! 3.2.0 through 3.6.5; this was fixed in 3.7.0. The connected sources confi...
CVE-2017-7987
In Joomla! 3.2.0 through 3.6.5 fixed in 3.7.0, inadequate escaping of file and folder names leads to XSS vulnerabilities in the template manager component...
CVE-2017-7984
CVE-2017-7984 affects Joomla! templates manager: inadequate input filtering leading to cross-site scripting (XSS) in the template manager component. Affected Joomla! versions range from 3.2.0 through 3.6.5; the issue is fixed in 3.7.0. The vulnerability arises from improper handling/validation of...