Joomla! vulnerabilities

Products

• Joomla! 7
• Core 2

Newest

• joomla!, joomla joomla\!, joomla! project cms +2 more [20230201] - Core - Improper access check in webservice endpoints CVE-2023-23752 In KEVPublic exploitFix available EPSS 99.8% 5.3 MediumFebruary 16, 2023
• joomla! tinybrowser plugin, tiny tinybrowser +1 more TinyBrowser plugin for Joomla! before 1.5.13 allows arbitrary file upload via upload.php. CVE-2011-4908 Public exploit EPSS 55.8% 9.8 CriticalFebruary 12, 2020
• joomla! tiny browser included with tinymce 3.0, tiny tinybrowser +1 more Tiny browser in TinyMCE 3.0 editor in Joomla! before 1.5.13 allows file upload and arbitrary PHP... CVE-2011-4906 Public exploit 9.8 CriticalFebruary 12, 2020
• joomla!, joomla joomla\! +1 more Joomla! 1.6.0 is vulnerable to SQL Injection via the filter_order and filer_order_Dir parameters. CVE-2011-1151 9.1 CriticalFebruary 5, 2020
• joomla!, joomla joomla\! +1 more Joomla! com_mailto 1.5.x through 1.5.13 has an automated mail timeout bypass. CVE-2011-4912 5.3 MediumFebruary 4, 2020
• joomla! core, joomla joomla\! +1 more Joomla! core 1.7.1 allows information disclosure due to weak encryption CVE-2011-3629 7.5 HighFebruary 4, 2020
• joomla!, joomla joomla\! +1 more Joomla! 1.7.1 has core information disclosure due to inadequate error checking. CVE-2011-4937 7.5 HighFebruary 4, 2020
• joomla!, joomla joomla\! +1 more Multiple Cross-site Scripting (XSS) vulnerabilities exist in Joomla! through 1.7.0 in index.php... CVE-2011-3595 5.4 MediumJanuary 22, 2020
• joomla!, joomla joomla\! +1 more Joomla! 1.5x through 1.5.12: Missing JEXEC Check CVE-2011-4907 5.3 MediumJanuary 15, 2020
• joomla!, joomla joomla\! +1 more Joomla! before 2.5.3 allows Admin Account Creation. CVE-2012-1563 Public exploit 7.5 HighJanuary 15, 2020
• joomla! core, joomla joomla\! +1 more Joomla! core before 2.5.3 allows unauthorized password change. CVE-2012-1562 7.5 HighJanuary 15, 2020