751 matches found
JomSocial component pre 3.1.0.1
JomSocial component 3.1.0.1 RFI The new version number is 3.1.0.4 http://www.jomsocial.com/blog/hot-fix-3-1-0-4...
iRecommend, >= 3.0,
iRecommend, = 3.0, Other XSS & FPD developer states inaccurate report...
extplorer, 2.1.4 and below
extplorere, ID,DT, release of 2.1.5 http://extplorer.net/news/14...
Spider contacts, 1.3.3,
Spider contacts, 1.3.3, SQL Injection Extension Update Details We have fixed the vulnerability on Spider Contacts. We have changed the version to 1.3.4 on JED and also added corresponding text to the description. UpdateNoticeURL http://web-dorado.com/products/joomla-contacts.html...
spider contact lite, sqli
spider contact lite , , as per http://vel.joomla.org/vel-blog/976-spider-contacts-1-3-3.html Extension Update Details We have fixed the vulnerability on Spider Contacts Lite. We have changed the version to 1.3.4 on JED and also added corresponding text to the description. UpdateNoticeURL...
[20131103] Core XSS Vulnerability
Inadequate filtering leads to XSS vulnerability in comcontact...
[20131101] Core XSS Vulnerability
Inadequate filtering leads to XSS vulnerability in comcontact...
event registration pro
event registration pro, , SQL Injection UpdateNoticeURL: http://www.joomlashowroom.com/blog/security-and-bug-release-for-all-versions-of-event-registration-pro affects versions prior to 3.0.1 Joomla 3 prior to 2.5.6 Joomla 2.5 prior to 1.5.22 Joomla 1.5...
jomsocial below 3.0.5.1
jomsocial , 3.0.5.1, SQL Injection Resolved prior to notification...
[20131102] Core XSS Vulnerability
Inadequate filtering leads to XSS vulnerability in comcontact, comweblinks, comnewsfeeds...
My Blog, 2.0.1 Build 286,
My Blog, 2.0.1 Build 286, SQL Injection...
Mijo Analytics, Joomla 2.5.x,
Mijo Analytics, Joomla 2.5.x, SQL Injection...
Ace SEF4
With the AceSEF 4.0.0, XSS Vulnerability is solved http://www.joomace.net/joomla-extensions/acesef/changelog UpdateNoticeURL http://www.joomace.net/joomla-extensions/acesef-joomla-seo-sef-urls...
sectionex, 2.5.96
sectionex, , SQL Injection Extension Update Details Version 2.5.104 Update Notice URL http://stackideas.com/blog/important-security-release-for-sectionex-2-5...
joomsport pro and std
joomsport, pro 3.1.1 and std 2.0 , Directory Traversal developers release statement Security notes put in product description and put release notes on our site for both products http://joomsport.com/downloads/components.html?lang=en - Here is the link for standard updated release...
Cobalt,8.270
Cobalt, , DT/permissions developer update Notice updated http://www.mintjoomla.com/blog/item/279-update-cobalt-v-8-279-stable.html...
k2, 2.6.6, Open Folder Permissions
k2, Open folder permissions developer notice http:/getk2.org/blog/1432-k2-v267-released-akismet-integrated-new-acl-option-improved-php-54-support...
[20130801] - Core - Unauthorised Uploads
Inadequate filtering leads to the ability to bypass file type upload restrictions...
Unite Horizontal Carousel
Unite Horizontal Carousel, , Directory Traversal Updated the extension, fixed the bug, the new version is 1.1 UpdateNoticeURL http://unitecms.net/news...
Master Password,
Master Password, 1.5 and any previous, Information Disclosure This extension appears to have been abandoned by the developer...
Jinc, all versions,
Jinc, all versions, XSS Cross Site Scripting UpdateNotice URL http://lhacky.altervista.org/jextensions/index.php/component/content/article/21-news/jinc/100-security-issue-on-jinc-1-0-1...
CiviCRM 4.3.3 and previous
CiviCRM, = 4.3.3, XSS Cross Site Scripting Update Notice URL http://civicrm.org/blogs/colemanw/security-release-civicrm-434...
flashChart Content Plugin,
flashChart Content Plugin, 1.2.1, XSS Cross Site Scripting Extension Update Details updatet/fixed XSS vulnerability in open-flashchart-swf for external call "get-data" UpdateNoticeURL http://www.jschmidt-systemberatung.de/index.php?lang=en=227...
Jinc, ALL,
Jinc ALL - Exploit Type Arbitrary File Creation Vulnerability JINC until version 1.0.1 is affected by a vulnerability providing attackers the ability to update arbitrary files in Joomla! installation. This problem is solved in JINC 1.0.2...
Phoca Gallery 3x
Phoca Gallery, 3x, SQL Injection...
bo:VideoJS, 2.1.1,
bo:VideoJS, 2.1.1, xss From developerhttp://www.boeschung.de/en/joomla/bo-videojs/video-js-v320...
civic crm 422
upload exploit /RFI 260413 developer http://civicrm.org/category/civicrm-blog-categories/civicrm-v43 release 4.3.1 Authors:...
aiContactSafe 2.0.19
xss 160413 developer release statement for version 2.0.21 Authors:...
alfcontact
xss 230413...
[20130407] - Core - XSS Vulnerability
Inadequate filtering leads to XSS vulnerability in highlighter plugin...
[20130402] - Core - Information Disclosure
Inadequate permission checking allows unauthorised user to see permission settings in some circumstances...
[20130401] - Core - Privilege Escalation
Inadequate permission checking allows unauthorised user to delete private messages...
[20130403] - Core - XSS Vulnerability
Inadequate filtering allows possibility of XSS exploit in some circumstances...
[20130405] - Core - XSS Vulnerability
Inadequate filtering leads to XSS vulnerability in Voting plugin...
worldrates
http://dev.pucit.edu.pk/120410 Authors:...
MT Fire Eagle
LFI http://joomlacode.org/gf/project/jfireeagle/frs/http://www.moto-treks.com 190410 product considered retired and to be replaced by dev Authors:...
[20130406] - Core - DOS Vulnerability
Object unserialize method leads to possible denial of service vulnerability...
[20130404] - Core - XSS Vulnerability
Use of old version of Flash-based file uploader leads to XSS vulnerability...
[20130202] - Core - Information Disclosure
Undefined variable caused information disclosure in some situations...
[20130203] - Core - Information Disclosure
Coding errors led to information disclosure in some situations...
[20130201] - Core - Information Disclosure
Method of encoding search terms led to possible information disclosure...
[20121102] - Core - Clickjacking
Inadequate protection leads to clickjacking vulnerability...
[20121101] - Core - Clickjacking
Inadequate protection leads to clickjacking vulnerability...
[20121001] - Core - XSS Vulnerability
Typographical error leads to XSS vulnerability in language search component...
[20120902] - Core - XSS Vulnerability
Inadequate escaping of output leads to XSS vulnerability in language switcher module...
[20120602] - Core - Information Disclosure
Inadequate filtering leads SQL error and information disclosure...
[20120901] - Core - XSS Vulnerability
Inadequate escaping of output leads to XSS vulnerability...
[20120601] - Core - Privilege Escalation
Inadequate checking leads to possible user privilege escalation...