Разработчик: labs.integrity.pt

Высокая CVSS 7.2

CVE-2015-7342

РасширениеJoobi Jnews

Разработчикlabs.integrity.pt

JNews Joomla Component before 8.5.0 allows SQL injection via upload thumbnail, Queue Search Field, Subscribers Search Field, or Newsletters Search Field.

09.03.2020

Высокая CVSS 8.8

CVE-2015-7341

РасширениеJoobi Jnews

Разработчикlabs.integrity.pt

JNews Joomla Component before 8.5.0 allows arbitrary File Upload via Subscribers or Templates, as demonstrated by the .php5 extension.

09.03.2020

Высокая CVSS 7.2

CVE-2015-7340

РасширениеGwesystems Jevents

Разработчикlabs.integrity.pt

JEvents Joomla Component before 3.4.0 RC6 has SQL Injection via evid in a Manage Events action.

09.03.2020

Высокая CVSS 8.8

CVE-2015-7339

РасширениеJCE

Разработчикlabs.integrity.pt

JCE Joomla Component 2.5.0 to 2.5.2 allows arbitrary file upload via a .php file extension for an image file to the /com_jce/editor/libraries/classes/browser.php script.

09.03.2020

Высокая CVSS 7.2

CVE-2015-7338

РасширениеAcyba Acymailing

Разработчикlabs.integrity.pt

SQL Injection exists in AcyMailing Joomla Component before 4.9.5 via exportgeolocorder in a geolocation_longitude request to index.php.

09.03.2020

Средняя CVSS 4.8

CVE-2015-7344

РасширениеHikashop Hikashop

Разработчикlabs.integrity.pt

HikaShop Joomla Component before 2.6.0 has XSS via an injected payload[/caption].

09.03.2020

Средняя CVSS 4.8

CVE-2015-7343

РасширениеJoobi Jnews

Разработчикlabs.integrity.pt

JNews Joomla Component before 8.5.0 has XSS via the mailingsearch parameter.

09.03.2020