summary: A weakness has been identified in TRENDnet TEW-823DRU 1.1.02b01. This vulnerability affects the function nvram_get of the component CLI Configuration Tool. This manipulation causes command injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks.


default_status: unaffected

product: JEM - Joomla Event Manager extension for Joomla

status: affected

ecosystem: software/application

metric_type: Secondary

severity: medium

quality: metadata-backed

recipe_kind: composed

status: Deferred

summary: Joomla Extension - joomlaeventmanager.net - Reflected XSS via the PDF export link in Joomla Events Manager < 5.0.1 - buildCurrentPdfLink copies the current request query string into the PDF button URL, and pdfbutton() echoes it unescaped, leading to an reflected XSS vector.

title: Joomlaeventmanager.Net Jem - Joomla Event Manager Extension For Joomla security vulnerability


summary: Joomla Extension - joomlaeventmanager.net - Attendee lists readable by any logged-in user in Joomla Event Manager < 5.0.1 - A non-manager can therefore read attendee names, usernames, registration dates and statuses for events they do not manage, including lists belonging to unpublished events.


severity: critical

summary: Joomla Extension - joomlaeventmanager.net - Privileged remote code execution in Joomla Event Manager < 5.0.1 - The administrator source model allows to write dangerous file type incl. PHP, leading to remote code execution.


product: Fabrik extension for Joomla

summary: Joomla Extension - fabrikar.com - heredoc terminator breakout in the calc element in Fabrik < 4.7.2 - The onUpdateComment endpoint did not perform any access checks.

title: Fabrikar.Com Fabrik Extension For Joomla security vulnerability


product: Page Builder CK extension for Joomla

summary: Joomla Extension - joomlack.fr - Reflected XSS in Page Builder CK < 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a reflected XSS via the iscontenttype parameter.

title: Joomlack.Fr Page Builder Ck Extension For Joomla security vulnerability


summary: Joomla Extension - joomlack.fr - Second order SQL injection in Page Builder CK < 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a SQL injection issue related to the loadStyles method of the frontend page model.


product: miniOrange OAuth Client extension for Joomla

summary: Joomla Extension - miniorange.com - Arbitrary account takeover in miniOrange OAuth Client < 3.2.0 - The manipulation of a cookie value allows actors to login as arbitrary accounts, including admins.

title: Miniorange.Com Miniorange Oauth Client Extension For Joomla security vulnerability


product: YOOtheme Pro extension for Joomla

severity: high

summary: Joomla Extension - yootheme.com - Authenticated, privileged stored XSS in YOOtheme Pro 1.0.0-5.0.41 - Lack of escaping in the location custom field lead to a XSS vector.

title: Yootheme.Com Yootheme Pro Extension For Joomla security vulnerability


summary: Joomla Extension - yootheme.com - Authenticated, privileged information disclosure in YOOtheme Pro 1.0.0-5.0.41 - A missing access check allowed users with com_template editing permissions to access information about arbitrary modules without the respective com_modules permissions.


product: SAML SSO Free for Joomla extension for Joomla

product: SAML SSO Basic for Joomla extension for Joomla

product: SAML SSO Standard for Joomla extension for Joomla

product: SAML SSO Premium for Joomla extension for Joomla

product: SAML SSO Enterprise for Joomla extension for Joomla

product: SAML SP Single Sign On – Login with ADFS extension for Joomla

product: SAML SSO login with Google Apps extension for Joomla

product: OAuth Single Sign-On – OIDC SSO | Login with Azure AD

product: Login with Keycloak OAuth Single Sign-On (SSO)

product: Single Sign-On for Educational Institutes - version

summary: Joomla Extension - miniorange.com - Unauthenticated Authentication Bypass via SAMLResponse Parameter in miniOrange SAML SSO < 11.0.2, SAML SP Single Sign On – Login with ADFS < 6.4, SAML SP Single Sign On – SAML SSO login with Google Apps < 6.4 - This is due to the mo_saml_validate_signature() function performing a loose boolean check on the raw tri-state integer returned by PHP's openssl_verify(), causing an error return value of -1 to be evaluated as truthy and therefore treated as a successful signature verification. This makes it possible for unauthenticated attackers to log in as any existing Joomla user, including administrators, by submitting a crafted SAMLResponse containing an attacker-controlled NameID and a deliberately malformed signature value that triggers an OpenSSL processing error — bypassing verification entirely and resulting in wp_set_auth_cookie() being called for the targeted account.

title: Miniorange.Com Saml Sso Free For Joomla Extension For Joomla security vulnerability