Show filters
389 Total Results
Displaying 101-110 of 389
Sort by:
Attacker Value
Unknown
CVE-2020-11890
Disclosure Date: April 21, 2020 (last updated February 21, 2025)
An issue was discovered in Joomla! before 3.9.17. Improper input validations in the usergroup table class could lead to a broken ACL configuration.
0
Attacker Value
Unknown
CVE-2020-11889
Disclosure Date: April 21, 2020 (last updated November 27, 2024)
An issue was discovered in Joomla! before 3.9.17. Incorrect ACL checks in the access level section of com_users allow the unauthorized deletion of usergroups.
0
Attacker Value
Unknown
CVE-2020-10242
Disclosure Date: March 16, 2020 (last updated February 21, 2025)
An issue was discovered in Joomla! before 3.9.16. Inadequate handling of CSS selectors in the Protostar and Beez3 JavaScript allows XSS attacks.
0
Attacker Value
Unknown
CVE-2020-10239
Disclosure Date: March 16, 2020 (last updated February 21, 2025)
An issue was discovered in Joomla! before 3.9.16. Incorrect Access Control in the SQL fieldtype of com_fields allows access for non-superadmin users.
0
Attacker Value
Unknown
CVE-2020-10238
Disclosure Date: March 16, 2020 (last updated February 21, 2025)
An issue was discovered in Joomla! before 3.9.16. Various actions in com_templates lack the required ACL checks, leading to various potential attack vectors.
0
Attacker Value
Unknown
CVE-2020-10241
Disclosure Date: March 16, 2020 (last updated February 21, 2025)
An issue was discovered in Joomla! before 3.9.16. Missing token checks in the image actions of com_templates lead to CSRF.
0
Attacker Value
Unknown
CVE-2020-10240
Disclosure Date: March 16, 2020 (last updated February 21, 2025)
An issue was discovered in Joomla! before 3.9.16. Missing length checks in the user table can lead to the creation of users with duplicate usernames and/or email addresses.
0
Attacker Value
Unknown
CVE-2020-10243
Disclosure Date: March 16, 2020 (last updated February 21, 2025)
An issue was discovered in Joomla! before 3.9.16. The lack of type casting of a variable in a SQL statement leads to a SQL injection vulnerability in the Featured Articles frontend menutype.
0
Attacker Value
Unknown
CVE-2011-1151
Disclosure Date: February 05, 2020 (last updated February 21, 2025)
Joomla! 1.6.0 is vulnerable to SQL Injection via the filter_order and filer_order_Dir parameters.
0
Attacker Value
Unknown
CVE-2011-4912
Disclosure Date: February 04, 2020 (last updated February 21, 2025)
Joomla! com_mailto 1.5.x through 1.5.13 has an automated mail timeout bypass.
0
