CVE-2012-2901
- EPSS 0.36%
- Veröffentlicht 21.05.2012 18:55:02
- Zuletzt bearbeitet 11.04.2025 00:51:21
Cross-site scripting (XSS) vulnerability in the Profile List in the Joomla Content Editor (JCE) component before 2.1 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the search parameter to administrator/index.php.
- EPSS 0.56%
- Veröffentlicht 21.05.2012 18:55:02
- Zuletzt bearbeitet 11.04.2025 00:51:21
Unrestricted file upload vulnerability in editor/extensions/browser/file.php in the Joomla Content Editor (JCE) component before 2.1 for Joomla!, when chunking is set to greater than zero, allows remote authors to execute arbitrary PHP code by upload...
CVE-2006-6419
- EPSS 0.74%
- Veröffentlicht 10.12.2006 11:28:00
- Zuletzt bearbeitet 09.04.2025 00:30:58
jce.php in the JCE Admin Component in Ryan Demmer Joomla Content Editor (JCE) 1.1.0 beta 2 and earlier for Joomla! (com_jce) allows remote attackers to include and possibly execute arbitrary local files via the (1) plugin or (2) file parameter. NOTE...
CVE-2006-6420
- EPSS 1.01%
- Veröffentlicht 10.12.2006 11:28:00
- Zuletzt bearbeitet 09.04.2025 00:30:58
Multiple cross-site scripting (XSS) vulnerabilities in jce.php in the JCE Admin Component in Ryan Demmer Joomla Content Editor (JCE) 1.1.0 beta 2 and earlier for Joomla! (com_jce) allow remote attackers to inject arbitrary web script or HTML via the ...
CVE-2006-6166
- EPSS 0.98%
- Veröffentlicht 29.11.2006 02:28:00
- Zuletzt bearbeitet 09.04.2025 00:30:58
Cross-site scripting (XSS) vulnerability in jce.php in the JCE Admin Component in Ryan Demmer Joomla Content Editor (JCE) 1.0.4 for Joomla! (com_jce), without the 20060821 jce_patch, allows remote attackers to inject arbitrary web script or HTML via ...