CVE-2019-15120

Mô tả

Tham khảo

• h3llraiser/CVE-2019-15120 · Exploit
• vel.joomla.org/resolved/2260-kunena-5-0-x-5-1-14-xss-cross-site-scripting · Third Party Advisory
• kunena.org/blog/207-kunena-5-1-14-released · Release Notes

Lỗ hổng khác của kunena

• CVE-2016-11020NGHIÊM TRỌNG 9.8Kunena before 5.0.4 does not restrict avatar file extensions to gif, jpeg, jpg, and png. This can lead to XSS and remote code execution.
• CVE-2017-5673TRUNG BÌNH 6.1In the Kunena extension 5.0.2 through 5.0.4 for Joomla!, the forum message subject (aka topic subject) accepts JavaScript, leading to XSS. S…
• CVE-2014-9103TRUNG BÌNH 4.3Multiple cross-site scripting (XSS) vulnerabilities in the Kunena component before 3.0.6 for Joomla! allow remote attackers to inject arbitr…
• CVE-2014-9102TRUNG BÌNH 6.5Multiple SQL injection vulnerabilities in the Kunena component before 3.0.6 for Joomla! allow remote authenticated users to execute arbitrar…
• CVE-2012-4868CAO 7.5SQL injection vulnerability in news.php in the Kunena component 1.7.2 for Joomla! allows remote attackers to execute arbitrary SQL commands …