CVE-2025-67079

File upload vulnerability in Omnispace Agora Project before 25.10 allowing attackers to execute code through the MSL engine of the Imagick library via crafted PDF file to the file upload and thumbnail functions...

EUVD-2015-7266

Malware in sbrugna...

CVE-2015-7342: Improper Neutralization of Special Elements used in an SQL Command

JNews Joomla Component before 8.5.0 allows SQL injection via upload thumbnail, Queue Search Field, Subscribers Search Field, or Newsletters Search Field...

PT-2020-7886

Name of the Vulnerable Software and Affected Versions: JNews Joomla Component versions prior to 8.5.0 Description: The issue allows SQL injection via several fields, including upload thumbnail, Queue Search Field, Subscribers Search Field, or Newsletters Search Field. Recommendations: For version...

PT-2018-16804

Name of the Vulnerable Software and Affected Versions Simple Download Monitor plugin versions prior to 3.5.4 Description The issue allows for XSS via the sdm upload thumbnail parameter in an edit action to the "/wp-admin/post.php" endpoint. This affects the plugin's functionality related to file...