Vulnérabilités Joomla

CVE-2022-27910 In Joomla component 'Joomlatools - DOCman 3.5.13 (and likely most versions below)' are affected to an reflected Cross-Site Scripting (XSS) in an image upload f… docman · 1 source · il y a 4 ans MEDIUM CVSS 6.1

CVE-2022-27909 In Joomla component 'jDownloads 3.9.8.2 Stable' the remote user can change some parameters in the address bar and see the names of other users' files jdownloads · 1 source · il y a 4 ans MEDIUM CVSS 4.3

CVE-2022-23802 Joomla Guru extension 5.2.5 is affected by: Insecure Permissions. guru · 1 source · il y a 4 ans HIGH CVSS 7.5

CVE-2020-19455 SQL injection exists in the jdownloads 3.2.63 component for Joomla! jdownloads · 1 source · il y a 6 ans HIGH CVSS 7.5

CVE-2020-19451 SQL injection exists in the jdownloads 3.2.63 component for Joomla! jdownloads · 1 source · il y a 6 ans HIGH CVSS 7.5

CVE-2020-19450 SQL injection exists in the jdownloads 3.2.63 component for Joomla! jdownloads · 1 source · il y a 6 ans HIGH CVSS 7.5

CVE-2020-19447 SQL injection exists in the jdownloads 3.2.63 component for Joomla! jdownloads · 1 source · il y a 6 ans HIGH CVSS 7.5

CVE-2020-25751 The paGO Commerce plugin 2.5.9.0 for Joomla! pago_commerce · 1 source · il y a 6 ans HIGH CVSS 8.8

CVE-2020-23971 gmapfp.org Joomla Component GMapFP J3.30pro is affected by Insecure Permissions. gmapfp · 1 source · il y a 6 ans HIGH CVSS 7.5

CVE-2020-23972 In Joomla Component GMapFP Version J3.5 and J3.5free, an attacker can access the upload function without authenticating to the application and can also upload… gmapfp · 1 source · il y a 6 ans HIGH CVSS 7.5

CVE-2020-13996 The J2Store plugin before 3.3.13 for Joomla! j2store · 1 source · il y a 6 ans HIGH CVSS 8.8

CVE-2020-13424 The XCloner component before 3.5.4 for Joomla! xcloner · 1 source · il y a 6 ans MEDIUM CVSS 6.5

CVE-2015-7342 JNews Joomla Component before 8.5.0 allows SQL injection via upload thumbnail, Queue Search Field, Subscribers Search Field, or Newsletters Search Field. jnews · 1 source · il y a 6 ans HIGH CVSS 7.2

CVE-2015-7341 JNews Joomla Component before 8.5.0 allows arbitrary File Upload via Subscribers or Templates, as demonstrated by the .php5 extension. jnews · 1 source · il y a 6 ans HIGH CVSS 8.8

CVE-2015-7340 JEvents Joomla Component before 3.4.0 RC6 has SQL Injection via evid in a Manage Events action. jevents · 1 source · il y a 6 ans HIGH CVSS 7.2

CVE-2015-7339 JCE Joomla Component 2.5.0 to 2.5.2 allows arbitrary file upload via a .php file extension for an image file to the /com_jce/editor/libraries/classes/browser.p… jce · 1 source · il y a 6 ans HIGH CVSS 8.8

CVE-2015-7338 SQL Injection exists in AcyMailing Joomla Component before 4.9.5 via exportgeolocorder in a geolocation_longitude request to index.php. acymailing · 1 source · il y a 6 ans HIGH CVSS 7.2

CVE-2015-7344 HikaShop Joomla Component before 2.6.0 has XSS via an injected payload[/caption]. hikashop · 1 source · il y a 6 ans MEDIUM CVSS 4.8

CVE-2015-7343 JNews Joomla Component before 8.5.0 has XSS via the mailingsearch parameter. jnews · 1 source · il y a 6 ans MEDIUM CVSS 4.8

CVE-2020-9364 An issue was discovered in helpers/mailer.php in the Creative Contact Form extension 4.6.2 before 2019-12-03 for Joomla!. creative_contact_form · 1 source · il y a 6 ans MEDIUM CVSS 5.3