Vulnérabilités Joomla

CVE-2020-19455 SQL injection exists in the jdownloads 3.2.63 component for Joomla! jdownloads · 1 source · il y a 6 ans HIGH CVSS 7.5

CVE-2020-19451 SQL injection exists in the jdownloads 3.2.63 component for Joomla! jdownloads · 1 source · il y a 6 ans HIGH CVSS 7.5

CVE-2020-19450 SQL injection exists in the jdownloads 3.2.63 component for Joomla! jdownloads · 1 source · il y a 6 ans HIGH CVSS 7.5

CVE-2020-19447 SQL injection exists in the jdownloads 3.2.63 component for Joomla! jdownloads · 1 source · il y a 6 ans HIGH CVSS 7.5

CVE-2020-25751 The paGO Commerce plugin 2.5.9.0 for Joomla! pago_commerce · 1 source · il y a 6 ans HIGH CVSS 8.8

CVE-2020-23971 gmapfp.org Joomla Component GMapFP J3.30pro is affected by Insecure Permissions. gmapfp · 1 source · il y a 6 ans HIGH CVSS 7.5

CVE-2020-23972 In Joomla Component GMapFP Version J3.5 and J3.5free, an attacker can access the upload function without authenticating to the application and can also upload… gmapfp · 1 source · il y a 6 ans HIGH CVSS 7.5

CVE-2020-13996 The J2Store plugin before 3.3.13 for Joomla! j2store · 1 source · il y a 6 ans HIGH CVSS 8.8

CVE-2020-13763 In Joomla! before 3.9.19, the default settings of the global textfilter configuration do not block HTML inputs for Guest users. Joomla CMS · 1 source · il y a 6 ans HIGH CVSS 7.5

CVE-2020-13760 In Joomla! before 3.9.19, missing token checks in com_postinstall lead to CSRF. Joomla CMS · 1 source · il y a 6 ans HIGH CVSS 8.8

CVE-2020-10241 An issue was discovered in Joomla! Joomla CMS · 1 source · il y a 6 ans HIGH CVSS 8.8

CVE-2020-10239 An issue was discovered in Joomla! Joomla CMS · 1 source · il y a 6 ans HIGH CVSS 8.8

CVE-2020-10238 An issue was discovered in Joomla! Joomla CMS · 1 source · il y a 6 ans HIGH CVSS 7.5

CVE-2015-7342 JNews Joomla Component before 8.5.0 allows SQL injection via upload thumbnail, Queue Search Field, Subscribers Search Field, or Newsletters Search Field. jnews · 1 source · il y a 6 ans HIGH CVSS 7.2

CVE-2015-7341 JNews Joomla Component before 8.5.0 allows arbitrary File Upload via Subscribers or Templates, as demonstrated by the .php5 extension. jnews · 1 source · il y a 6 ans HIGH CVSS 8.8

CVE-2015-7340 JEvents Joomla Component before 3.4.0 RC6 has SQL Injection via evid in a Manage Events action. jevents · 1 source · il y a 6 ans HIGH CVSS 7.2

CVE-2015-7339 JCE Joomla Component 2.5.0 to 2.5.2 allows arbitrary file upload via a .php file extension for an image file to the /com_jce/editor/libraries/classes/browser.p… jce · 1 source · il y a 6 ans HIGH CVSS 8.8

CVE-2015-7338 SQL Injection exists in AcyMailing Joomla Component before 4.9.5 via exportgeolocorder in a geolocation_longitude request to index.php. acymailing · 1 source · il y a 6 ans HIGH CVSS 7.2

CVE-2011-4937 Joomla! 1.7.1 has core information disclosure due to inadequate error checking. Joomla CMS · 1 source · il y a 6 ans HIGH CVSS 7.5

CVE-2011-3629 Joomla! core 1.7.1 allows information disclosure due to weak encryption Joomla CMS · 1 source · il y a 6 ans HIGH CVSS 7.5