Weak encryption had caused potential information disclosure.
Part of security release: 1.7.2
This vulnerability affects the following application versions:
Inadequate escaping leads to XSS vulnerability in com_media.
CVE-2014-6631
Part of security release: 3.2.5 and 3.3.4
This vulnerability affects the following application versions:
When running a site under SSL ONLY (the entire site was forced to be under ssl), Joomla! had not set the SSL flag on the cookie. This had allowed someone monitoring the network to find the cookie related to the session.
This vulnerability affects the following application versions:
Inadequate filtering in update manager leads to XSS vulnerability.
CVE-2012-1612
Part of security release: 2.5.4
This vulnerability affects the following application versions:
It had been possible for a remote attacker to extract a remotely hosted archive while you had been extracting a backup archive / installing an update, depending on your server settings. The attack was not possible at any other time. Merely having Joomla installed had not made your site vulnerable.
This vulnerability affects the following application versions:
Weak encryption had caused potential information disclosure.
This vulnerability affects the following application versions:
Programming error allows privilege escalation in some cases.
Part of security release: 2.5.3
This vulnerability affects the following application versions:
A flaw in JRequest exists where variables set with JRequest::setVar are not cleaned when fetching the variable at a later point in the request. This can result in variable injection (unwanted characters injected into returned data).
Part of security release: 1.5.7
This vulnerability affects the following application versions:
Inadequate filtering leads to XSS vulnerability in Voting plugin.
CVE-2013-3059
Part of security release: 2.5.10, 3.1.0 and 3.0.4.
This vulnerability affects the following application versions:
Session id doesn’t get modified when user logs in. A remote site may be able to forward a visitor to the Joomla! site and set a specific cookie. If the user then logs in, the remote site can use that cookie to authenticate as that user.
This vulnerability affects the following application versions:
Inadequate filtering leads to the ability to bypass file type upload restrictions.
Part of security release: 2.5.14 or 3.1.5.
This vulnerability affects the following application versions:
Inadequate permission checking allows unauthorised viewing of administrative back end information.
This vulnerability affects the following application versions:
Inadequate permission checking had allowed unauthorised user to see permission settings in some circumstances.
CVE Number: CVE-2013-3057
Part of security release: 2.5.10, 3.1.0 and 3.0.4.
This vulnerability affects the following application versions:
In com_mailto, it had been possible to bypass timeout protection against sending automated emails.
This vulnerability affects the following application versions:
Inadequate escaping of output leads to XSS vulnerability in language switcher module.
CVE-2012-4532
Part of security release: 2.5.7
This vulnerability affects the following application versions:
Inadequate filtering leads to XSS vulnerability.
Part of security release: 1.7.4 and 2.5.0
This vulnerability affects the following application versions:
Inadequate escaping of output leads to XSS vulnerability.
CVE-2012-4531
Part of security release: 2.5.7
This vulnerability affects the following application versions:
The mailto component had not verified validity of the URL prior to sending.
This vulnerability affects the following application versions:
On some servers the error log had been read by unauthorised users.
This vulnerability affects the following application versions:
Inadequate permission checking allows unauthorised user to delete private messages.
CVE Number: CVE-2013-3056
Part of security release: 2.5.10, 3.1.0 and 3.0.4.
This vulnerability affects the following application versions:
A flaw in the reset token validation mechanism allows for non-validating tokens to be forged. This will allow an unauthenticated, unauthorized user to reset the password of the first enabled user (lowest id). Typically, this is an administrator user. Note, that changing the first users username may lessen the impact of this exploit (since the person who changed the password does not know the login associated with the new password). However, the only way to completely rectify the issue is to upgrade to 1.5.6 (or patch the /components/com_user/models/reset.php file).
Part of security release: 1.5.6
This vulnerability affects the following application versions:
Inadequate filtering leads to XSS vulnerability.
Part of security release: 1.7.4 and 2.5.0
This vulnerability affects the following application versions:
Inadequate filtering allows possibility of XSS exploit in some circumstances.
CVE-2013-3058
Part of security release: 2.5.10, 3.1.0 and 3.0.4
This vulnerability affects the following application versions:
Weak random number generation during password reset leads to possibility of changing a user’s password.
This vulnerability affects the following application versions:
Inadequate filtering leads to XSS vulnerability in highlighter plugin.
Part of security release: 2.5.10, 3.1.0 and 3.0.4.
This vulnerability affects the following application versions:
Object unserialize method had led to possible denial of service vulnerability.
This vulnerability affects the following application versions:
Method of encoding search terms had led to possible information disclosure.
This vulnerability affects the following application versions:
Inadequate escaping leads to XSS vulnerability.
Part of security release: 1.6.6
This vulnerability affects the following application versions:
Inadequate protection leads to clickjacking vulnerability.
CVE-2012-5827
Part of security release: 2.5.8
This vulnerability affects the following application versions:
Standoutmedia er et webbureau dedikeret til WordPress platformen.
Vi driver egne hostingløsninger, hvor tusindvis af kunder hver dag modtager sikkerhedsopdateringer.
Læs mere om os her: https://standoutmedia.dk/