CVE-2019-25740

Joomla comjsjobs 1.2.6 contains an arbitrary file deletion vulnerability that allows authenticated attackers to delete files by manipulating custom userfield parameters. Attackers can send POST requests to the job.savejob task with path traversal sequences in the field2 parameter to delete...

Joomla! component com_jsjobs 1.2.6 - Arbitrary File Deletion

Joomla! component comjsjobs 1.2.6 - Arbitrary File Deletion Exploit Title: Joomla! component comjsjobs 1.2.6 - Arbitrary File Deletion Dork: inurl:"index.php?option=comjsjobs" Date: 2019-08-16 Exploit Author: qw3rTyTy Vendor Homepage: https://www.joomsky.com/ Software Link:...

Joomla JS Jobs 1.2.6 Arbitrary File Delete

Exploit Title: Joomla! component comjsjobs 1.2.6 - Arbitrary File Deletion Dork: inurl:"index.php?option=comjsjobs" Date: 2019-08-16 Exploit Author: qw3rTyTy Vendor Homepage: https://www.joomsky.com/ Software Link: https://www.joomsky.com/5/download/1 Version: 1.2.6 Tested on: Debian/nginx/joomla...

Joomla com_jsjobs 1.2.6 component - Arbitrary File Deletion Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! component comjsjobs 1.2.6 - Arbitrary File Deletion Dork: inurl:"index.php?option=comjsjobs" Exploit Author: qw3rTyTy Vendor Homepage: https://www.joomsky.com/ Software Link: https://www.joomsky.com/5/download/1 Version:...

Joomla! component com_jsjobs 1.2.6 - Arbitrary File Deletion

Exploit Title: Joomla! component comjsjobs 1.2.6 - Arbitrary File Deletion Dork: inurl:"index.php?option=comjsjobs" Date: 2019-08-16 Exploit Author: qw3rTyTy Vendor Homepage: https://www.joomsky.com/ Software Link: https://www.joomsky.com/5/download/1 Version: 1.2.6 Tested on: Debian/nginx/joomla...

Cross site scripting

Cross-site scripting XSS vulnerability in Slashdot Like Automated Storytelling Homepage Slash aka Slashcode R25094 and earlier allows remote attackers to inject arbitrary web script or HTML via the userfield parameter...

CVE-2008-2553

Cross-site scripting XSS vulnerability in Slashdot Like Automated Storytelling Homepage Slash aka Slashcode R25094 and earlier allows remote attackers to inject arbitrary web script or HTML via the userfield parameter...

CVE-2008-2553

Cross-site scripting XSS vulnerability in Slashdot Like Automated Storytelling Homepage Slash aka Slashcode R25094 and earlier allows remote attackers to inject arbitrary web script or HTML via the userfield parameter...