According to its self-reported version number, the detected Joomla! application is affected by multiple vulnerabilities :

 - A flaw exists related to SQL query handling that allows disclosure of article introduction text when such articles are in the archived state. Note that only versions 3.7.0 through 3.7.5 are affected by this flaw. (CVE-2017-14595)

 - An input-validation flaw exists in the LDAP authentication plugin that allows disclosure of usernames and passwords. Note that Joomla! must be configured for LDAP authentication to be affected. (CVE-2017-14596)

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

According to its self-reported version number, the detected Joomla! application is affected by an authentication bypass and multiple information disclosure vulnerabilities.

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

根据其自我报告的版本号，远程 Web 服务器上安装运行的 Joomla! 为 1.5.0 或更高版本，但低于 3.8.2。因而会受到身份验证绕过和多个信息泄露漏洞的影响。请注意，Nessus 并不试图利用这些问题，而只依赖于应用程序自我报告的版本号。

ID	名稱	產品	系列	已發布	已更新	嚴重性
98453	Joomla! 3.5.x < 3.8.0 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	2018/11/5	2023/3/14	critical
98455	Joomla! 3.3.x < 3.8.0 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	2018/11/5	2023/3/14	critical
98462	Joomla! 1.5.x < 3.8.0 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	2018/11/5	2023/3/14	critical
98463	Joomla! 3.8.x < 3.8.2 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	2018/11/5	2023/3/14	critical
98465	Joomla! 3.6.x < 3.8.2 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	2018/11/5	2023/3/14	critical
98470	Joomla! 3.1.x < 3.8.2 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	2018/11/5	2023/3/14	critical
98474	Joomla! 1.6.x < 3.8.2 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	2018/11/5	2023/3/14	critical
104478	Joomla! 1.5.0 < 3.8.2 多个漏洞	Nessus	CGI abuses	2017/11/9	2025/5/14	critical

偵測

搜尋 Plugin

critical

critical

critical

critical

critical

critical

critical

critical