09189971525
09189971107

پوكه معدني. , قیمت پوکه معدنی قروه, . پوکه ساختمانی

انواع پوکه معدنی. پوکه معدنی قروه. قیمت پوکه معدنی. قیمت پوکه معدنی قروه. قیمت پوکه معدنی در تهران

Joomla! Security News

    • Project: Joomla!
    • SubProject: CMS
    • Impact: Moderate
    • Severity: Low
    • Versions: 3.9.7 - 3.9.8
    • Exploit type: Remote Code Execution
    • Reported Date: 2019-June-20
    • Fixed Date: 2019-July-09
    • CVE Number: TBA

    Description

    Inadequate filtering allows users authorised to create custom fields to manipulate the filtering options and inject an unvalidated option.

    Affected Installs

    Joomla! CMS versions 3.9.7 - 3.9.8

    Solution

    Upgrade to version 3.9.9

    Contact

    The JSST at the Joomla! Security Centre.

    Reported By:Benjamin Trenkle, JSST
    • Project: Joomla!
    • SubProject: CMS
    • Impact:Low
    • Severity: Low
    • Versions: 3.8.13 through 3.9.6
    • Exploit type: Incorrect Access Control
    • Reported Date: 2019-April-10
    • Fixed Date: 2019-June-11
    • CVE Number: CVE-2019-12764

    Description

    The update server URL of com_joomlaupdate can be manipulated by non Super-Admin users.

    Affected Installs

    Joomla! CMS versions 3.8.13 through 3.9.6

    Solution

    Upgrade to version 3.9.7

    Contact

    The JSST at the Joomla! Security Centre.

     
    • Project: Joomla!
    • SubProject: CMS
    • Impact:Moderate
    • Severity: Low
    • Versions: 3.6.0 through 3.9.6
    • Exploit type: XSS
    • Reported Date: 2019-January-01
    • Fixed Date: 2019-June-11
    • CVE Number: CVE-2019-12766

    Description

    The subform fieldtype does not sufficiently filter or validate input of subfields, this leads to XSS attack vectors.

    Affected Installs

    Joomla! CMS versions 3.6.0 through 3.9.6

    Solution

    Upgrade to version 3.9.7

    Contact

    The JSST at the Joomla! Security Centre.

    Reported By:Volkmar Schlothauer, ghsvs.de
    • Project: Joomla!
    • SubProject: CMS
    • Impact:Low
    • Severity: Low
    • Versions: 3.9.0 through 3.9.6
    • Exploit type: CSV Injection
    • Reported Date: 2019-April-29
    • Fixed Date: 2019-June-11
    • CVE Number: CVE-2019-12765

    Description

    The CSV export of com_actionslogs is vulnerable to CSV injection.

    Affected Installs

    Joomla! CMS versions 3.9.0 through 3.9.6

    Solution

    Upgrade to version 3.9.7

    Contact

    The JSST at the Joomla! Security Centre.

    Reported By:Jose Antonio Rodriguez Garcia and Phil Keeble (MWR InfoSecurity)
    • Project: Joomla!
    • SubProject: CMS
    • Impact:Low
    • Severity: Low
    • Versions: 3.9.3 through 3.9.5
    • Exploit type: Object Injection
    • Reported Date: 2019-March-27
    • Fixed Date: 2019-May-07

    Description

    In Joomla 3.9.3, the vulnerability of insecure deserialization when executing Phar archives was addressed by removing the known attack vector in the Joomla core. In order to intercept file invocations like file_exists or stat on compromised Phar archives the base name has to be determined and checked before allowing to be handled by PHP Phar stream handling. The used implementation however is vulnerable to path traversal leading to scenarios where the Phar archive to be assessed is not the actual (compromised) file.

    Affected Installs

    Joomla! CMS versions 3.9.3 through 3.9.5

    Solution

    Upgrade to version 3.9.6

    Contact

    The JSST at the Joomla! Security Centre.

    Reported By:Daniel le Gall, Fix coordinated by Oliver Hader from TYPO3
0078441
امروز
دیروز
این هفته
هفته قبل
این ماه
ماه قبل
کل بازدید
4727
959
12632
12632
55697
22746
78441

پیش بینی امروز
5712

0.25%
0.89%
4.55%
0.11%
94.19%
زمان آنلاین بودن (15 دقیقه پیش):62
62 مهامانان

آی پی شما107.23.37.199

ارتباط با ما

 

جهت سفارش پوکه معدنی درجه یک قروه میتوانید هم با شماره
(09189971525 ) و (09189971107 )
بگیرید و یا به دفتر فروش معدن مراجعه کنید.