David Jardin

**Nome do Software Vulnerável e Versões Afetadas** Joomla JCE Editor versões 1.0.0 até 2.9.99.4 **Description** O controle de acesso inadequado na extensão do editor JCE para Joomla permite que usuários não autenticados criem novos perfis de editor. Essa falha possibilita o upload e a execução de código PHP, podendo levar à execução remota de código (RCE) através do diretório `/tmp/`. O problema está relacionado a um endpoint AJAX que carece de autenticação, especificamente envolvendo a tarefa de importação de perfis no endpoint 'index.php?option=com jce&task=profiles.import'. A exploração no mundo real foi observada em centenas de sites, com invasores implantando web shells para estabelecer backdoors persistentes. **Recommendations** Atualize para a versão 2.9.99.5 ou 2.9.99.6. Como processo de limpeza para sites potencialmente comprometidos, faça backup de perfis maliciosos, exclua perfis criados por invasores, altere todas as senhas de administrador, banco de dados e conta de hospedagem, e realize uma varredura completa de malware no servidor. Monitore os logs de acesso em busca de solicitações não autenticadas para o endpoint 'index.php?option=com jce&task=profiles.import' e audite a existência de perfis de editor suspeitos.

**Name of the Vulnerable Software and Affected Versions** AcyMailing Enterprise component for Joomla (affected versions not specified) **Description** The issue allows unauthorized actors to obtain the number of subscribers in a specific list, exposing sensitive information. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** AcyMailing Enterprise component for Joomla (affected versions not specified) **Description** The issue is related to an Improper Access Control vulnerability in the AcyMailing Enterprise component for Joomla. It allows unauthorized removal of attachments from campaigns. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** AcyMailing Enterprise component for Joomla (affected versions not specified) **Description** The issue is related to an Improper Access Control vulnerability in the AcyMailing Enterprise component for Joomla. This vulnerability allows unauthorized users to create new mailing lists. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** AcyMailing Enterprise component for Joomla versions 6.7.0 through 8.6.3 **Description** The issue is related to improper neutralization of input during web page generation, allowing Cross-Site Scripting (XSS). This enables potential attackers to inject malicious scripts into web pages. **Recommendations** For versions 6.7.0 through 8.6.3, update to a version that includes a fix for this issue. As a temporary workaround, consider restricting user input to minimize the risk of exploitation.

**Nome do software vulnerável e versões afetadas** Joomla! versões 3.0.0 a 3.9.24 **Descrição** Foi descoberta uma falha em que verificações incorretas de ACL poderiam permitir a alteração não autorizada da categoria de um artigo. **Recomendações** Para as versões do Joomla! 3.0.0 a 3.9.24, atualize para uma versão que inclua a correção para esta falha, a fim de impedir alterações não autorizadas nas categorias dos artigos.

**Name of the Vulnerable Software and Affected Versions** Joomla! versions prior to 3.9.3 **Description** An issue was discovered where the phar:// stream wrapper can be used for object injection attacks due to the lack of a protection mechanism. This allows the phar:// handler to be used for non .phar-files, potentially leading to exploitation. **Recommendations** For versions prior to 3.9.3, update to version 3.9.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the phar:// stream wrapper to minimize the risk of object injection attacks.

**Name of the Vulnerable Software and Affected Versions** Joomla! versions prior to 3.8.13 **Description** An issue in com contact allows mail submission in disabled forms due to inadequate checks. **Recommendations** For versions prior to 3.8.13, update to version 3.8.13 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Joomla! Core versions prior to 3.8.8 **Description** The issue is related to inadequate filtering of file and folder names, which leads to various XSS attack vectors in the media manager. **Recommendations** For versions prior to 3.8.8, update to version 3.8.8 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Joomla! Core versions prior to 3.8.8 **Description** A lack of escaping the user-info component of the URI could result in an XSS issue under specific circumstances, such as when a redirect is issued with a URI containing a username and password, and the Location: header cannot be used. **Recommendations** For versions prior to 3.8.8, update to version 3.8.8 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Joomla! Core versions prior to 3.8.8 **Description** A race condition issue was discovered, related to long-running background processes such as remote checks for core or extension updates. This could lead to the recreation of a session that was expected to be destroyed. **Recommendations** For versions prior to 3.8.8, update to version 3.8.8 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Joomla! versions prior to 3.8.4 **Description** The issue is related to a lack of escaping in the module chromes, which leads to XSS vulnerabilities in the module system. **Recommendations** For versions prior to 3.8.4, update to version 3.8.4 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Joomla! versions 3.2.0 through 3.6.5 **Description** The issue is related to inadequate escaping of file and folder names, which leads to XSS vulnerabilities in the template manager component. **Recommendations** For versions 3.2.0 through 3.6.5, update to version 3.7.0 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Joomla! versions 1.6 through 1.7.3 **Description** A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. **Recommendations** For Joomla! versions 1.6 through 1.7.3, update to version 1.7.4 or later to resolve the issue.