Show filters
389 Total Results
Displaying 51-60 of 389
Sort by:
Attacker Value
Unknown
CVE-2022-23794
Disclosure Date: March 29, 2022 (last updated October 07, 2023)
An issue was discovered in Joomla! 3.0.0 through 3.10.6 & 4.0.0 through 4.1.0. Uploading a file name of an excess length causes the error. This error brings up the screen with the path of the source code of the web application.
0
Attacker Value
Unknown
CVE-2022-23795
Disclosure Date: March 29, 2022 (last updated October 07, 2023)
An issue was discovered in Joomla! 2.5.0 through 3.10.6 & 4.0.0 through 4.1.0. A user row was not bound to a specific authentication mechanism which could under very special circumstances allow an account takeover.
0
Attacker Value
Unknown
CVE-2021-26040
Disclosure Date: August 24, 2021 (last updated February 23, 2025)
An issue was discovered in Joomla! 4.0.0. The media manager does not correctly check the user's permissions before executing a file deletion command.
0
Attacker Value
Unknown
CVE-2021-26037
Disclosure Date: July 06, 2021 (last updated February 22, 2025)
An issue was discovered in Joomla! 2.5.0 through 3.9.27. CMS functions did not properly termine existing user sessions when a user's password was changed or the user was blocked.
0
Attacker Value
Unknown
CVE-2021-26038
Disclosure Date: July 06, 2021 (last updated February 22, 2025)
An issue was discovered in Joomla! 2.5.0 through 3.9.27. Install action in com_installer lack the required hardcoded ACL checks for superusers. A default system is not affected cause the default ACL for com_installer is limited to super users already.
0
Attacker Value
Unknown
CVE-2021-26035
Disclosure Date: July 06, 2021 (last updated February 22, 2025)
An issue was discovered in Joomla! 3.0.0 through 3.9.27. Inadequate escaping in the rules field of the JForm API leads to a XSS vulnerability.
0
Attacker Value
Unknown
CVE-2021-26039
Disclosure Date: July 06, 2021 (last updated February 22, 2025)
An issue was discovered in Joomla! 3.0.0 through 3.9.27. Inadequate escaping in the imagelist view of com_media leads to a XSS vulnerability.
0
Attacker Value
Unknown
CVE-2021-26036
Disclosure Date: July 06, 2021 (last updated February 22, 2025)
An issue was discovered in Joomla! 2.5.0 through 3.9.27. Missing validation of input could lead to a broken usergroups table.
0
Attacker Value
Unknown
CVE-2010-1432
Disclosure Date: June 21, 2021 (last updated February 22, 2025)
Joomla! Core is prone to an information disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may help in launching further attacks. Joomla! Core versions 1.5.x ranging from 1.5.0 and up to and including 1.5.15 are vulnerable.
0
Attacker Value
Unknown
CVE-2010-1435
Disclosure Date: June 21, 2021 (last updated February 22, 2025)
Joomla! Core is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently retrieve password reset tokens from the database through an already existing SQL injection vector. Joomla! Core versions 1.5.x ranging from 1.5.0 and up to and including 1.5.15 are vulnerable.
0
