Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Vendors
Joomla
Joomla\!

Joomla Joomla\! vulnerabilities

Known exploitedIn KEVPublic exploitFix available

joomla joomla\!The register method in the UsersModelRegistration class in controllers/user.php in the Users...CVE-2016-8869Public exploitEPSS 97.3%9.8 CriticalNovember 4, 2016
joomla joomla\!SQL injection vulnerability in Joomla! 3.x before 3.4.7 allows attackers to execute arbitrary SQL...CVE-2015-87697.3 HighJanuary 12, 2016
joomla joomla\!Directory traversal vulnerability in Joomla! 3.2.0 through 3.3.x and 3.4.x before 3.4.6 allows...CVE-2015-85657.5 HighDecember 16, 2015
joomla joomla\!Directory traversal vulnerability in Joomla! 3.4.x before 3.4.6 allows remote attackers to have...CVE-2015-85647.5 HighDecember 16, 2015
joomla joomla\!Cross-site request forgery (CSRF) vulnerability in the com_templates component in Joomla! 3.2.0...CVE-2015-85636.8 MediumDecember 16, 2015
joomla joomla\!Joomla! 1.5.x, 2.x, and 3.x before 3.4.6 allow remote attackers to conduct PHP object injection...CVE-2015-8562Public exploitEPSS 98.2%7.5 HighDecember 16, 2015
joomla joomla\!The com_content component in Joomla! 3.x before 3.4.5 does not properly check ACLs, which allows...CVE-2015-78995.0 MediumOctober 29, 2015
joomla joomla\!The com_contenthistory component in Joomla! 3.2 before 3.4.5 does not properly check ACLs, which...CVE-2015-78595.0 MediumOctober 29, 2015
joomla joomla\!SQL injection vulnerability in Joomla! 3.2 before 3.4.4 allows remote attackers to execute...CVE-2015-7858Public exploitEPSS 85.6%7.5 HighOctober 29, 2015
joomla joomla\!SQL injection vulnerability in the getListQuery function in administrator/components...CVE-2015-7857Public exploitEPSS 94.5%7.5 HighOctober 29, 2015
joomla joomla\!SQL injection vulnerability in Joomla! 3.2 before 3.4.4 allows remote attackers to execute...CVE-2015-7297Public exploitEPSS 100.0%7.5 HighOctober 29, 2015
joomla joomla\!Cross-site scripting (XSS) vulnerability in the login module in Joomla! 3.4.x before 3.4.4 allows...CVE-2015-69394.3 MediumSeptember 18, 2015
joomla joomla\!Cross-site request forgery (CSRF) vulnerability in Joomla! 3.2.0 through 3.3.x and 3.4.x before 3...CVE-2015-53976.8 MediumJuly 14, 2015
joomla joomla\!SQL injection vulnerability in the EQ Event Calendar component for Joomla! allows remote...CVE-2015-46547.5 HighJune 18, 2015
joomla joomla\!Akeeba Restore (restore.php), as used in Joomla! 2.5.4 through 2.5.25, 3.x through 3.2.5, and 3.3...CVE-2014-7228Public exploitEPSS 56.0%7.5 HighNovember 3, 2014
joomla joomla\!Cross-site scripting (XSS) vulnerability in the ja_purity template for Joomla! 1.5.26 and earlier...CVE-2012-24134.3 MediumOctober 20, 2014
joomla joomla\!Joomla! CMS 2.5.x before 2.5.19 and 3.x before 3.2.3 allows remote attackers to authenticate and...CVE-2014-79847.5 HighOctober 8, 2014
joomla joomla\!Cross-site scripting (XSS) vulnerability in com_contact in Joomla! CMS 3.1.2 through 3.2.x before...CVE-2014-79834.3 MediumOctober 8, 2014
joomla joomla\!Cross-site scripting (XSS) vulnerability in Joomla! CMS 2.5.x before 2.5.19 and 3.x before 3.2.3...CVE-2014-79824.3 MediumOctober 8, 2014
joomla joomla\!SQL injection vulnerability in Joomla! CMS 3.1.x and 3.2.x before 3.2.3 allows remote attackers...CVE-2014-79817.5 HighOctober 8, 2014
joomla joomla\!Unspecified vulnerability in Joomla! before 2.5.4 before 2.5.26, 3.x before 3.2.6, and 3.3.x...CVE-2014-72295.0 MediumOctober 8, 2014
joomla joomla\!Joomla! 2.5.x before 2.5.25, 3.x before 3.2.4, and 3.3.x before 3.3.4 allows remote attackers to...CVE-2014-66327.5 HighOctober 8, 2014
joomla joomla\!Cross-site scripting (XSS) vulnerability in com_media in Joomla! 3.2.x before 3.2.5 and 3.3.x...CVE-2014-66314.3 MediumOctober 8, 2014
joomla joomla\!Joomla! Cross-site Scripting vulnerabilityCVE-2013-5583Fix available4.3 MediumDecember 29, 2013
joomla joomla\!administrator/components/com_media/helpers/media.php in the media manager in Joomla! 2.5.x before...CVE-2013-5576Public exploitEPSS 48.2%6.8 MediumOctober 9, 2013
joomla joomla\!Cross-site scripting (XSS) vulnerability in the highlighter plugin in Joomla! 2.5.x before 2.5.10...CVE-2013-32674.3 MediumMay 3, 2013
joomla joomla\!plugins/system/remember/remember.php in Joomla! 2.5.x before 2.5.10 and 3.0.x before 3.0.4 does...CVE-2013-3242Public exploit5.5 MediumMay 3, 2013
joomla joomla\!Cross-site scripting (XSS) vulnerability in the Voting plugin in Joomla! 2.5.x before 2.5.10 and...CVE-2013-30594.3 MediumMay 3, 2013
joomla joomla\!Cross-site scripting (XSS) vulnerability in Joomla! 2.5.x before 2.5.10 and 3.0.x before 3.0.4...CVE-2013-30584.3 MediumMay 3, 2013
joomla joomla\!Joomla! 2.5.x before 2.5.10 and 3.0.x before 3.0.4 allows remote authenticated users to bypass...CVE-2013-30574.0 MediumMay 3, 2013
joomla joomla\!Joomla! 2.5.x before 2.5.10 and 3.0.x before 3.0.4 allows remote authenticated users to bypass...CVE-2013-30564.0 MediumMay 3, 2013
joomla joomla\!Joomla! 3.0.x through 3.0.2 allows attackers to obtain sensitive information via unspecified...CVE-2013-14555.0 MediumFebruary 13, 2013
joomla joomla\!Joomla! 3.0.x through 3.0.2 allows attackers to obtain sensitive information via unspecified...CVE-2013-14545.0 MediumFebruary 13, 2013
joomla joomla\!plugins/system/highlight/highlight.php in Joomla! 3.0.x through 3.0.2 and 2.5.x through 2.5.8...CVE-2013-1453Public exploit7.5 HighFebruary 13, 2013
joomla joomla\!Joomla! 1.5.x before 1.5.26 does not properly check permissions, which allows attackers to obtain...CVE-2012-15995.0 MediumDecember 3, 2012
joomla joomla\!Joomla! 1.5.x before 1.5.26 has unspecified impact and attack vectors related to "insufficient...CVE-2012-15987.5 HighDecember 3, 2012
joomla joomla\!Joomla! 2.5.x before 2.5.8 and 3.0.x before 3.0.2 allows remote attackers to conduct clickjacking...CVE-2012-58274.3 MediumNovember 11, 2012
joomla joomla\!Cross-site scripting (XSS) vulnerability in modules/mod_languages/tmpl/default.php in the...CVE-2012-45324.3 MediumOctober 31, 2012
joomla joomla\!Cross-site scripting (XSS) vulnerability in Joomla! 2.5.x before 2.5.7 allows remote attackers to...CVE-2012-45314.3 MediumOctober 31, 2012
joomla joomla\!Cross-site scripting (XSS) vulnerability in the language search component in Joomla! before 3.0.1...CVE-2012-54554.3 MediumOctober 22, 2012
joomla joomla\!Joomla! before 1.5.12 does not perform a JEXEC check in unspecified files, which allows remote...CVE-2011-49115.0 MediumOctober 7, 2012
joomla joomla\!Cross-site scripting (XSS) vulnerability in Joomla! before 1.5.12 allows remote attackers to...CVE-2011-49104.3 MediumOctober 7, 2012
joomla joomla\!Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.5.12 allow remote...CVE-2011-4909Public exploit4.3 MediumOctober 7, 2012
joomla joomla\!Cross-site scripting (XSS) vulnerability in Joomla! 2.5.0 and 2.5.1 allows remote attackers to...CVE-2012-11174.3 MediumSeptember 26, 2012
joomla joomla\!SQL injection vulnerability in Joomla! 1.7.x and 2.5.x before 2.5.2 allows remote attackers to...CVE-2012-1116Public exploit7.5 HighSeptember 26, 2012
joomla joomla\!Cross-site scripting (XSS) vulnerability in the update manager in Joomla! 2.5.x before 2.5.4...CVE-2012-16124.3 MediumSeptember 6, 2012
joomla joomla\!Joomla! 2.5.x before 2.5.4 does not properly check permissions, which allows attackers to obtain...CVE-2012-16115.0 MediumSeptember 6, 2012
joomla joomla\!Joomla! 1.7.x before 1.7.5 and 2.5.x before 2.5.1 allows attackers to obtain the installation...CVE-2012-08375.0 MediumSeptember 6, 2012
joomla joomla\!Unspecified vulnerability in Joomla! 1.7.x before 1.7.5 allows attackers to read the error log...CVE-2012-08365.0 MediumSeptember 6, 2012
joomla joomla\!Unspecified vulnerability in Joomla! 1.7.x before 1.7.5 and 2.5.x before 2.5.1 allows attackers...CVE-2012-08355.0 MediumSeptember 6, 2012
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open