Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Jomres Component: Jomres Clear all filters
TI-2013-03434 CVE-2013-3932 · GHSA-343p-p7qv-45r9

SQL injection in Jomres component for Joomla!

Priority MEDIUM 42

SQL injection vulnerability in the Jomres (com_jomres) component before 7.3.1 for Joomla! allows remote authenticated users with the "Business Manager" permission to execute arbitrary SQL commands via the id parameter in…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01758 Published 2020-01-02 Fixed in 7.3.1 CWE-89
TI-2013-03433 CVE-2013-3931 · GHSA-rgcq-vvvf-5qcq

Cross-site scripting in Jomres component for Joomla!

Priority LOW 26

Cross-site scripting (XSS) vulnerability in the Jomres (com_jomres) component before 7.3.1 for Joomla! allows remote authenticated users with the "Business Manager" permission to inject arbitrary web script or HTML via t…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00971 Published 2020-01-02 Fixed in 7.3.1 CWE-79