Code injection

An issue was discovered in Joomla! before 3.9.17. Incorrect ACL checks in the access level section of comusers allow the unauthorized editing of usergroups...

Default credentials

An issue was discovered in Joomla! before 3.9.17. Incorrect ACL checks in the access level section of comusers allow the unauthorized deletion of usergroups...

CVE-2020-11891

An issue was discovered in Joomla! before 3.9.17. Incorrect ACL checks in the access level section of comusers allow the unauthorized editing of usergroups...

CVE-2020-11891

Joomla! prior to 3.9.17 contains an ACL misconfiguration in the com_users access level editing function, allowing unauthorized editing of user groups. This CVE (CVE-2020-11891) is consistently described across multiple sources (Red Hat, OSV, NVD, CNVD, OpenVAS, etc.) with the same root cause: inc...

CVE-2020-11889

CVE-2020-11889 : Joomla! before 3.9.17 has an ACL check flaw in the com_users access level section that allows unauthorized deletion of usergroups due to incorrect access-control checks. Affected product is Joomla! (CMS). The connected documents confirm the root cause and impact but do not includ...

PT-2020-12922 · Open Source Matters · Joomla!

Name of the Vulnerable Software and Affected Versions: Joomla! versions prior to 3.9.17 Description: An issue was discovered that allows unauthorized deletion of usergroups due to incorrect ACL checks in the access level section of com users. Recommendations: For versions prior to 3.9.17, update ...

[20200702] - Core - Missing checks can lead to a broken usergroups table record

Missing validation checks at the usergroups table object can result into an broken site configuration...

[20200403] - Core - Incorrect access control in com_users access level deletion function

Incorrect ACL checks in the access level section of comusers allow the unauthorized deletion of usergroups...

[20200401] - Core - Incorrect access control in com_users access level editing function

Incorrect ACL checks in the access level section of comusers allow the unauthorized editing of usergroups...

Joomla Front-edit Address Book Component (com_addressbook) Blind SQL Injection

No description provided by source. 1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : Joomla comaddressbook Blind Sqli Vulnerability Date : july 4,2010 Critical Level : HIGH vendor URL :http://b-elektro.no/ Author...

Joomla! Component Address Book - Blind SQL Injection

Joomla! Component Address Book - Blind SQL Injection 1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : Joomla comaddressbook Blind Sqli Vulnerability Date : july 4,2010 Critical Level : HIGH vendor URL...

Woltab Burning Board SQL Injection usergroups.php

Hi, A new SQL Injection in the wbb2.x CODE / delete applications groupleader / if $action == 'groupleadersdeleteapplications' $deleteids = array; if isarray$POST'applicationids' while list$applicationid, $val = each$POST'applicationids' if $val == 1 $deleteids = $applicationid; if $deleteids...

Woltlab Burning Board 2.x (usergroups.php) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl Woltlab Burning Board 2.X usergroups.php SQL Injection exploit - burned2.pl written by x666 [email protected] jmp-esp.kicks-ass.net;blueshisha.chills.it SR-CREW should work on every wbb regardless of php settings. use strict; use warnings;...

Woltlab Burning Board 2.x - usergroups.php SQL Injection

Woltlab Burning Board 2.x - usergroups.php SQL Injection !/usr/bin/perl Woltlab Burning Board 2.X usergroups.php SQL Injection exploit - burned2.pl written by x666 jmp-esp.kicks-ass.net;blueshisha.chills.it SR-CREW should work on every wbb regardless of php settings. use strict; use warnings; use...