Filtered by vendor Joobi
Subscriptions
Filtered by product Jnews
Subscriptions
Total
3 CVE
CVE | Vendors | Products | Updated | CVSS v3.1 |
---|---|---|---|---|
CVE-2015-7343 | 1 Joobi | 1 Jnews | 2024-11-21 | 4.8 Medium |
JNews Joomla Component before 8.5.0 has XSS via the mailingsearch parameter. | ||||
CVE-2015-7342 | 1 Joobi | 1 Jnews | 2024-11-21 | 7.2 High |
JNews Joomla Component before 8.5.0 allows SQL injection via upload thumbnail, Queue Search Field, Subscribers Search Field, or Newsletters Search Field. | ||||
CVE-2015-7341 | 1 Joobi | 1 Jnews | 2024-11-21 | 8.8 High |
JNews Joomla Component before 8.5.0 allows arbitrary File Upload via Subscribers or Templates, as demonstrated by the .php5 extension. |
Page 1 of 1.