CVE-2021-23131 [20210305] - Core - Input validation within the template manager

An issue was discovered in Joomla! 3.2.0 through 3.9.24. Missing input validation within the template manager...

PT-2021-15386 · Joomla · Joomla!

Name of the Vulnerable Software and Affected Versions: Joomla! versions 3.2.0 through 3.9.24 Description: An issue was discovered in the template manager due to missing input validation. Recommendations: For versions 3.2.0 through 3.9.24, update to a version that includes input validation in the...

[20210305] - Core - Input validation within the template manager

Missing input validation within the template manager...

CVE-2020-10667

The web application exposed by the Canon Oce Colorwave 500 4.0.0.0 printer is vulnerable to Stored XSS in /TemplateManager/indexExternalLocation.jsp. The vulnerable parameter is maptemplatename. NOTE: this is fixed in the latest version...

CVE-2020-10667

The web application exposed by the Canon Oce Colorwave 500 4.0.0.0 printer is vulnerable to Stored XSS in /TemplateManager/indexExternalLocation.jsp. The vulnerable parameter is maptemplatename. NOTE: this is fixed in the latest version...

Joomla! 1.7.x < 3.7.0 Multiple Vulnerabilities

According to its self-reported version number, the detected Joomla! application is affected by multiple vulnerabilities : - A flaw exists in the JMail API due to PHPMail version information being included in mail headers. An unauthenticated, remote attacker can exploit this to disclose sensitive...

Joomla! 2.5.x < 3.7.0 Multiple Vulnerabilities

According to its self-reported version number, the detected Joomla! application is affected by multiple vulnerabilities : - A flaw exists in the JMail API due to PHPMail version information being included in mail headers. An unauthenticated, remote attacker can exploit this to disclose sensitive...

Joomla! 3.5.x < 3.7.0 Multiple Vulnerabilities

According to its self-reported version number, the detected Joomla! application is affected by multiple vulnerabilities : - A flaw exists in the JMail API due to PHPMail version information being included in mail headers. An unauthenticated, remote attacker can exploit this to disclose sensitive...

Joomla! 1.5.x < 3.7.0 Multiple Vulnerabilities

According to its self-reported version number, the detected Joomla! application is affected by multiple vulnerabilities : - A flaw exists in the JMail API due to PHPMail version information being included in mail headers. An unauthenticated, remote attacker can exploit this to disclose sensitive...

Joomla! cross-site scripting vulnerability (CNVD-2017-06581)

Joomla! is the U.S. Open Source Matters team of a set of PHP and MySQL development using open source , cross-platform content management system CMS. A cross-site scripting vulnerability exists in Joomla! versions 3.2.0 through 3.6.5. The vulnerability arises due to insufficient escaping of file a...

CVE-2017-7987

In Joomla! 3.2.0 through 3.6.5 fixed in 3.7.0, inadequate escaping of file and folder names leads to XSS vulnerabilities in the template manager component...

Cross site scripting

In Joomla! 3.2.0 through 3.6.5 fixed in 3.7.0, inadequate escaping of file and folder names leads to XSS vulnerabilities in the template manager component...

CVE-2017-7987

In Joomla! 3.2.0 through 3.6.5 fixed in 3.7.0, inadequate escaping of file and folder names leads to XSS vulnerabilities in the template manager component...

Design/Logic Flaw

In Joomla! 3.2.0 through 3.6.5 fixed in 3.7.0, inadequate filtering leads to XSS in the template manager component...

CVE-2017-7987

CVE-2017-7987 affects Joomla! templates manager: the vulnerability arises from inadequate escaping of file and folder name input, enabling a stored/transient XSS when processing template names. Affected versions are Joomla! 3.2.0 through 3.6.5; this was fixed in 3.7.0. The connected sources confi...

CVE-2017-7987

In Joomla! 3.2.0 through 3.6.5 fixed in 3.7.0, inadequate escaping of file and folder names leads to XSS vulnerabilities in the template manager component...

CVE-2017-7984

CVE-2017-7984 affects Joomla! templates manager: inadequate input filtering leading to cross-site scripting (XSS) in the template manager component. Affected Joomla! versions range from 3.2.0 through 3.6.5; the issue is fixed in 3.7.0. The vulnerability arises from improper handling/validation of...

[20170402] - Core - XSS Vulnerability

Inadequate filtering leads to XSS in the template manager component...

[20170405] - Core - XSS Vulnerability

Inadequate escaping of file and folder names leads to XSS vulnerabilities in the template manager component...

SiteServer XSS+background uploading(the chicken help combination still very adorable)-vulnerability warning-the black bar safety net

Siteserver XSS+background randomly generated webshell Test version: SiteServer V3. 4. 3 1, The storage-typeXSS, www.xxx.com/UserCenter/main.aspx website content submission, click published,to edit click on the source-insert a periodXSSS,such as”scriptalert2 2 2 2 2 2 2 2 2 2 2/script,click on...