Show filters
391 Total Results
Displaying 221-230 of 391
Sort by:
Attacker Value
Unknown
CVE-2014-7982
Disclosure Date: October 08, 2014 (last updated October 05, 2023)
Cross-site scripting (XSS) vulnerability in Joomla! CMS 2.5.x before 2.5.19 and 3.x before 3.2.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
0
Attacker Value
Unknown
CVE-2013-5583
Disclosure Date: December 29, 2013 (last updated October 05, 2023)
Cross-site scripting (XSS) vulnerability in libraries/idna_convert/example.php in Joomla! 3.1.5 allows remote attackers to inject arbitrary web script or HTML via the lang parameter.
0
Attacker Value
Unknown
CVE-2013-3059
Disclosure Date: May 03, 2013 (last updated October 05, 2023)
Cross-site scripting (XSS) vulnerability in the Voting plugin in Joomla! 2.5.x before 2.5.10 and 3.0.x before 3.0.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
0
Attacker Value
Unknown
CVE-2013-3242
Disclosure Date: May 03, 2013 (last updated October 05, 2023)
plugins/system/remember/remember.php in Joomla! 2.5.x before 2.5.10 and 3.0.x before 3.0.4 does not properly handle an object obtained by unserializing a cookie, which allows remote authenticated users to conduct PHP object injection attacks and cause a denial of service via unspecified vectors.
0
Attacker Value
Unknown
CVE-2013-3056
Disclosure Date: May 03, 2013 (last updated October 05, 2023)
Joomla! 2.5.x before 2.5.10 and 3.0.x before 3.0.4 allows remote authenticated users to bypass intended privilege requirements and delete the private messages of arbitrary users via unspecified vectors.
0
Attacker Value
Unknown
CVE-2013-3267
Disclosure Date: May 03, 2013 (last updated October 05, 2023)
Cross-site scripting (XSS) vulnerability in the highlighter plugin in Joomla! 2.5.x before 2.5.10 and 3.0.x before 3.0.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
0
Attacker Value
Unknown
CVE-2013-3058
Disclosure Date: May 03, 2013 (last updated October 05, 2023)
Cross-site scripting (XSS) vulnerability in Joomla! 2.5.x before 2.5.10 and 3.0.x before 3.0.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
0
Attacker Value
Unknown
CVE-2013-3057
Disclosure Date: May 03, 2013 (last updated October 05, 2023)
Joomla! 2.5.x before 2.5.10 and 3.0.x before 3.0.4 allows remote authenticated users to bypass intended privilege requirements and list the privileges of arbitrary users via unspecified vectors.
0
Attacker Value
Unknown
CVE-2013-1455
Disclosure Date: February 13, 2013 (last updated October 05, 2023)
Joomla! 3.0.x through 3.0.2 allows attackers to obtain sensitive information via unspecified vectors related to an "Undefined variable."
0
Attacker Value
Unknown
CVE-2013-1453
Disclosure Date: February 13, 2013 (last updated October 05, 2023)
plugins/system/highlight/highlight.php in Joomla! 3.0.x through 3.0.2 and 2.5.x through 2.5.8 allows attackers to unserialize arbitrary PHP objects to obtain sensitive information, delete arbitrary directories, conduct SQL injection attacks, and possibly have other impacts via the highlight parameter. Note: it was originally reported that this issue only allowed attackers to obtain sensitive information, but later analysis demonstrated that other attacks exist.
0
