Skip to content

Joomla Joomla\! vulnerabilities

joomla joomla\!Cross-site scripting (XSS) vulnerability in Joomla! 1.6 and 1.7.x before 1.7.4 allows remote...CVE-2012-08224.3 MediumSeptember 6, 2012
joomla joomla\!Unspecified vulnerability in Joomla! 1.6.x and 1.7.x before 1.7.4 allows remote attackers to...CVE-2012-08215.0 MediumSeptember 6, 2012
joomla joomla\!Cross-site scripting (XSS) vulnerability in Joomla! 1.6.x and 1.7.x before 1.7.4 allows remote...CVE-2012-08204.3 MediumSeptember 6, 2012
joomla joomla\!Unspecified vulnerability in Joomla! 1.6.x and 1.7.x before 1.7.4 allows remote attackers to...CVE-2012-08195.0 MediumSeptember 6, 2012
joomla joomla\!Joomla! 2.5.3 allows remote attackers to obtain the installation path via the Host HTTP Header.CVE-2012-38295.0 MediumJuly 3, 2012
joomla joomla\!Cross-site scripting (XSS) vulnerability in Joomla! 2.5.3 allows remote attackers to inject...CVE-2012-38284.3 MediumJuly 3, 2012
joomla joomla\!Unspecified vulnerability in Joomla! 2.5.x before 2.5.5 allows remote attackers to obtain...CVE-2012-27485.0 MediumJuly 3, 2012
joomla joomla\!Unspecified vulnerability in Joomla! 2.5.x before 2.5.5 allows remote attackers to gain...CVE-2012-27477.5 HighJuly 3, 2012
joomla joomla\!Joomla! vulnerable to Cross-site ScriptingCVE-2011-4332Fix available4.3 MediumNovember 23, 2011
joomla joomla\!The password reset functionality in Joomla! 1.5.x through 1.5.24 uses weak random numbers, which...CVE-2011-43215.0 MediumNovember 23, 2011
joomla joomla\!Joomla! 1.6.0 allows remote attackers to obtain sensitive information via a direct request to a ...CVE-2011-37475.0 MediumSeptember 23, 2011
joomla joomla\!Joomla! 1.6.x before 1.6.2 does not prevent page rendering inside a frame in a third-party HTML...CVE-2011-28924.3 MediumJuly 27, 2011
joomla joomla\!Joomla! 1.6.x before 1.6.2 allows remote attackers to obtain sensitive information via an empty...CVE-2011-28915.0 MediumJuly 27, 2011
joomla joomla\!The MediaViewMedia class in administrator/components/com_media/views/media/view.html.php in...CVE-2011-28905.0 MediumJuly 27, 2011
joomla joomla\!templates/system/error.php in Joomla! before 1.5.23 might allow remote attackers to obtain...CVE-2011-28895.0 MediumJuly 27, 2011
joomla joomla\!Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.7.0 allow remote...CVE-2011-27104.3 MediumJuly 27, 2011
joomla joomla\!Joomla! vulnerable to Cross-site ScriptingCVE-2011-2509Fix available4.3 MediumJuly 27, 2011
joomla joomla\!Joomla! before 1.5.23 does not properly check for errors, which allows remote attackers to obtain...CVE-2011-24885.0 MediumJuly 27, 2011
joomla joomla\!Multiple SQL injection vulnerabilities in Joomla! 1.5.x before 1.5.22 allow remote attackers to...CVE-2010-46967.5 HighJanuary 18, 2011
joomla joomla\!Multiple SQL injection vulnerabilities in Joomla! 1.5.x before 1.5.22 allow remote attackers to...CVE-2010-41667.5 HighJanuary 18, 2011
joomla joomla\!Cross-site scripting (XSS) vulnerability in Joomla! 1.5.x before 1.5.21 and 1.6.x before 1.6.1...CVE-2010-37124.3 MediumOctober 27, 2010
joomla joomla\!Multiple cross-site scripting (XSS) vulnerabilities in the Back End in Joomla! 1.5.x before 1.5...CVE-2010-25353.5 LowOctober 5, 2010
joomla com weblinks, joomla\! +1 moreSQL injection vulnerability in the Weblinks (com_weblinks) component in Joomla! allows remote...CVE-2010-2679Public exploit7.5 HighJuly 8, 2010
joomla joomla\!Joomla! vulnerable to Cross-site ScriptingCVE-2010-1649Fix available4.3 MediumJune 7, 2010
joomla joomla\!Joomla! before 1.5.15 allows remote attackers to read an extension's XML file, and thereby obtain...CVE-2009-39465.0 MediumNovember 16, 2009
joomla joomla\!Unspecified vulnerability in the Front-End Editor in the com_content component in Joomla! before...CVE-2009-39455.5 MediumNovember 16, 2009
joomla joomla\!, markus donhauser ice gallery component for joomla +1 moreSQL injection vulnerability in the Ice Gallery (com_ice) component 0.5 beta 2 for Joomla! allows...CVE-2008-6852Public exploit7.5 HighJuly 7, 2009
joomla com mailto, joomla\! +1 moreSQL injection vulnerability in the MailTo (aka com_mailto) component in Joomla! allows remote...CVE-2009-1499Public exploit7.5 HighMay 1, 2009
joomla joomla\!Joomla! 1.5.8 does not set the secure flag for the session cookie in an https session, which...CVE-2008-41227.5 HighDecember 19, 2008
joomla joomla\!Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.0.13 (aka Sunglow) allow...CVE-2007-55774.3 MediumOctober 18, 2007
joomla joomla\!Joomla! vulnerable to CRLF injectionCVE-2007-4190Fix available4.3 MediumAugust 8, 2007
joomla joomla\!Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.0.13 (aka Sunglow) allow...CVE-2007-41894.3 MediumAugust 8, 2007
joomla joomla\!Session fixation vulnerability in Joomla! before 1.0.13 (aka Sunglow) allows remote attackers to...CVE-2007-41889.3 HighAugust 8, 2007
joomla joomla\!Multiple unspecified vulnerabilities in Joomla! before 1.0.11 allow attackers to bypass user...CVE-2006-44727.5 HighAugust 31, 2006
joomla joomla\!The Admin Upload Image functionality in Joomla! before 1.0.11 allows remote authenticated users...CVE-2006-44716.5 MediumAugust 31, 2006
joomla joomla\!Joomla! before 1.0.11 omits some checks for whether _VALID_MOS is defined, which allows attackers...CVE-2006-44707.5 HighAugust 31, 2006
joomla joomla\!Unspecified vulnerability in PEAR.php in Joomla! before 1.0.11 allows remote attackers to perform...CVE-2006-44697.5 HighAugust 31, 2006
joomla joomla\!Multiple unspecified vulnerabilities in Joomla! before 1.0.11, related to unvalidated input,...CVE-2006-44686.8 MediumAugust 31, 2006
mambo-foundation mambo, joomla joomla\! +1 moreThe com_rss option (rss.php) in (1) Mambo and (2) Joomla! allows remote attackers to cause a...CVE-2006-19575.0 MediumApril 21, 2006
joomla joomla\!Joomla! 1.03 does not restrict the number of "Search" Mambots, which allows remote attackers to...CVE-2005-46505.0 MediumDecember 31, 2005