Расширение: Joobi Jnews

Высокая CVSS 7.2

CVE-2015-7342

РасширениеJoobi Jnews

Разработчикlabs.integrity.pt

JNews Joomla Component before 8.5.0 allows SQL injection via upload thumbnail, Queue Search Field, Subscribers Search Field, or Newsletters Search Field.

09.03.2020

Высокая CVSS 8.8

CVE-2015-7341

РасширениеJoobi Jnews

Разработчикlabs.integrity.pt

JNews Joomla Component before 8.5.0 allows arbitrary File Upload via Subscribers or Templates, as demonstrated by the .php5 extension.

09.03.2020

Средняя CVSS 4.8

CVE-2015-7343

РасширениеJoobi Jnews

Разработчикlabs.integrity.pt

JNews Joomla Component before 8.5.0 has XSS via the mailingsearch parameter.

09.03.2020