VendorsJoobijnewsall versions
Vulnerabilities

Joobi jNews

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

3CVEs
CVE-2015-7341
JNews Joomla Component before 8.5.0 allows arbitrary File Upload via Subscribers or Templates, as demonstrated by the .php5 extension.
Published 2020-03-09 · Modified
8.8EPSS 0.011
CVE-2015-7342
JNews Joomla Component before 8.5.0 allows SQL injection via upload thumbnail, Queue Search Field, Subscribers Search Field, or Newsletters Search Field.
Published 2020-03-09 · Modified
7.2EPSS 0.010
CVE-2015-7343
JNews Joomla Component before 8.5.0 has XSS via the mailingsearch parameter.
Published 2020-03-09 · Modified
4.8EPSS 0.005