Inadequate filtering allows possibility of XSS exploit in some circumstances.
CVE-2013-3058
Part of security release: 2.5.10, 3.1.0 and 3.0.4
This vulnerability affects the following application versions:
Weak random number generation during password reset leads to possibility of changing a user’s password.
This vulnerability affects the following application versions:
Inadequate filtering leads to XSS vulnerability in highlighter plugin.
Part of security release: 2.5.10, 3.1.0 and 3.0.4.
This vulnerability affects the following application versions:
Object unserialize method had led to possible denial of service vulnerability.
This vulnerability affects the following application versions:
Method of encoding search terms had led to possible information disclosure.
This vulnerability affects the following application versions:
Inadequate escaping leads to XSS vulnerability.
Part of security release: 1.6.6
This vulnerability affects the following application versions:
Inadequate protection leads to clickjacking vulnerability.
CVE-2012-5827
Part of security release: 2.5.8
This vulnerability affects the following application versions:
A crafted request had caused disclosure of the directory structure on the server (including any directory that php has access to).
This vulnerability affects the following application versions:
Inadequate filtering leads to XSS vulnerability.
Part of security release: 1.6.4
This vulnerability affects the following application versions:
Inadequate checking had allowed unauthorised logins via GMail authentication.
This vulnerability affects the following application versions:
Tiny browser included with TinyMCE 3.0 editor allowed files to be uploaded and removed without logging in.
Part of security release: 1.5.12
This vulnerability affects the following application versions:
Filenames containing unsafe characters such as spaces are incorrectly allowed during file upload.
Part of security release: 3.1.5
This vulnerability affects the following application versions:
Inadequate escaping in several form fields leads to XSS vulnerabilities.
CVE-2014-7982
Part of security release: 2.5.19 and 3.2.3
This vulnerability affects the following application versions:
During construction of JURI objects the supplied URI isn’t sanitized properly, leading to a vulnerability for injection through crafted URLs.
This vulnerability affects the following application versions:
Inadequate escaping had led to SQL injection vulnerability.
This vulnerability affects the following application versions:
Inadequate escaping had led to SQL injection vulnerability in tags module.
This vulnerability affects the following application versions:
A series of CSRF faults had existed in the administrator application for com_media.
This vulnerability affects the following application versions:
Username validation does not adhere to provided rules, which allows users to register usernames which should be rejected. This exposes the system to potential exploits in combination with other vulnerabilities.
This vulnerability affects the following application versions:
Inadequate checking allowed unauthorised logins via LDAP authentication.
CVE Number: CVE-2014-6632
Part of security release: 2.5.25, 3.2.5, and 3.3.4
This vulnerability affects the following application versions:
Joomla 1.5.18 and older had contained various SQL injection vulnerabilities.
This vulnerability affects the following application versions:
Weak encryption had caused potential information disclosure.
Part of security release: 1.7.2
This vulnerability affects the following application versions:
Inadequate escaping leads to XSS vulnerability in com_media.
CVE-2014-6631
Part of security release: 3.2.5 and 3.3.4
This vulnerability affects the following application versions:
When running a site under SSL ONLY (the entire site was forced to be under ssl), Joomla! had not set the SSL flag on the cookie. This had allowed someone monitoring the network to find the cookie related to the session.
This vulnerability affects the following application versions:
Inadequate filtering in update manager leads to XSS vulnerability.
CVE-2012-1612
Part of security release: 2.5.4
This vulnerability affects the following application versions:
It had been possible for a remote attacker to extract a remotely hosted archive while you had been extracting a backup archive / installing an update, depending on your server settings. The attack was not possible at any other time. Merely having Joomla installed had not made your site vulnerable.
This vulnerability affects the following application versions:
Weak encryption had caused potential information disclosure.
This vulnerability affects the following application versions:
Programming error allows privilege escalation in some cases.
Part of security release: 2.5.3
This vulnerability affects the following application versions:
A flaw in JRequest exists where variables set with JRequest::setVar are not cleaned when fetching the variable at a later point in the request. This can result in variable injection (unwanted characters injected into returned data).
Part of security release: 1.5.7
This vulnerability affects the following application versions:
Inadequate filtering leads to XSS vulnerability in Voting plugin.
CVE-2013-3059
Part of security release: 2.5.10, 3.1.0 and 3.0.4.
This vulnerability affects the following application versions:
Standoutmedia er et webbureau dedikeret til WordPress platformen.
Vi driver egne hostingløsninger, hvor tusindvis af kunder hver dag modtager sikkerhedsopdateringer.
Læs mere om os her: https://standoutmedia.dk/