Skip to contentJoomla vulnerabilities
Newest
- joomla taskhopper componentMultiple PHP remote file inclusion vulnerabilities in the Taskhopper 1.1 component for Mambo and...CVE-2007-2005Public exploit6.8 Medium
- joomla car managerSQL injection vulnerability in index.php in the Car Manager (com_resman) 1.1 and earlier...CVE-2007-1704Public exploit7.5 High
- joomla rwcards componentSQL injection vulnerability in index.php in the RWCards (com_rwcards) 2.4.3 and earlier component...CVE-2007-1703Public exploit7.5 High
- joomla swmenu componentMultiple PHP remote file inclusion vulnerabilities in the SWmenu (com_swmenupro and...CVE-2007-1699Public exploitEPSS 10.8%10.0 High
- joomla nfn address bookMultiple PHP remote file inclusion vulnerabilities in the NFN Address Book (com_nfn_addressbook)...CVE-2007-1596Public exploit9.3 High
- joomla bsq sitestatsSQL injection vulnerability in Joomla BSQ Sitestats 1.8.0 and 2.2.1 allows remote attackers to...CVE-2006-71266.8 Medium
- joomla bsq sitestatsCross-site scripting (XSS) vulnerability in Joomla BSQ Sitestats 1.8.0 and 2.2.1 allows remote...CVE-2006-71256.8 Medium
- joomla bsq sitestatsPHP remote file inclusion vulnerability in external/rssfeeds.php in BSQ Sitestats (component for...CVE-2006-71247.5 High
- joomla bsq sitestatsMultiple SQL injection vulnerabilities in BSQ Sitestats (component for Joomla) 1.8.0, and...CVE-2006-71237.5 High
- joomla bsq sitestatsCross-site scripting (XSS) vulnerability in the IP Address Lookup functionality in BSQ Sitestats ...CVE-2006-71226.8 Medium
- joomlaThe mosgetparam implementation in Joomla! before 1.0.10, does not set a variable's data type to...CVE-2006-70107.5 High
- joomlaJoomla! before 1.0.10 allows remote attackers to spoof the frontend submission forms, which has...CVE-2006-70097.5 High
- joomlaUnspecified vulnerability in Joomla! before 1.0.10 has unknown impact and attack vectors, related...CVE-2006-70087.5 High
- joomla rs gallery2PHP remote file inclusion vulnerability in rsgallery2.html.php in the RS Gallery2 component ...CVE-2006-6962Public exploit6.8 Medium
- joomlaSQL injection vulnerability in models/category.php in the Weblinks component for Joomla! SVN...CVE-2007-03877.5 High
- joomlaJoomla! 1.5.0 Beta allows remote attackers to obtain sensitive information via a direct request...CVE-2007-03755.0 Medium
- joomla, mambo +1 moreSQL injection vulnerability in (1) Joomla! 1.0.11 and 1.5 Beta, and (2) Mambo 4.6.1, allows...CVE-2007-03747.5 High
- joomlaMultiple SQL injection vulnerabilities in Joomla! 1.5.0 Beta allow remote attackers to execute...CVE-2007-0373EPSS 12.3%6.8 Medium
- joomla be it easypartner componentPHP remote file inclusion vulnerability in the BE IT EasyPartner 0.0.9 beta component for Joomla!...CVE-2006-68437.5 High
- joomlaMultiple unspecified vulnerabilities in Joomla! before 1.0.12 have unknown impact and attack...CVE-2006-68346.8 Medium
- joomlacom_categories in Joomla! before 1.0.12 does not validate input, which has unknown impact and...CVE-2006-68337.5 High
- joomlaCross-site scripting (XSS) vulnerability in Joomla! before 1.0.12 allows remote attackers to...CVE-2006-68324.3 Medium
- joomla classifieds component, com classifieds +1 moreUnspecified vulnerability in Classifieds (com_classifieds) component 1.3 and earlier for Joomla!...CVE-2006-50497.5 High
- joomla rs gallery2Unspecified vulnerability in rsgallery2.html.php in RS Gallery2 component (com_rsgallery2) before...CVE-2006-50477.5 High
- joomla rs gallery2Unspecified vulnerability in RS Gallery2 (com_rsgallery2) 1.11.3 and earlier for Joomla! has...CVE-2006-50467.5 High
- joomla prince clan chess componentUnspecified vulnerability in Prince Clan (Princeclan) Chess component (com_pcchess) 0.8 and...CVE-2006-5044Public exploit7.5 High
- joomla mosmedia, com mosmedia +1 moreUnspecified vulnerability in mosMedia (com_mosmedia) 1.0.8 and earlier for Joomla! has...CVE-2006-50427.5 High
- joomla hot properties, com hotproperties +1 moreUnspecified vulnerability in Hot Properties (possibly com_hotproperties) 0.97 and earlier for...CVE-2006-50417.5 High
- joomla com sef, sef4040x +1 moreUnspecified vulnerability in SEF404x (com_sef) for Joomla! has unspecified impact and attack...CVE-2006-50407.5 High
- joomla com events, events module +1 moreUnspecified vulnerability in Events 1.3 beta module (com_events) for Joomla! has unspecified...CVE-2006-50397.5 High
- joomla joomlalibUnspecified vulnerability in JoomlaLib (com_joomlalib) before 1.2.2 for Joomla! allows remote...CVE-2006-499610.0 High
- joomla bsq sitestatsPHP remote file inclusion vulnerability in BSQ Sitestats (bsq_sitestats) before 2.1.1 for Joomla!...CVE-2006-49957.5 High
- joomla jd-wordpressMultiple PHP remote file inclusion vulnerabilities in JD-WordPress for Joomla! (com_jd-wp) 2.0-1...CVE-2006-4992Public exploit7.5 High
- joomla jim component** DISPUTED ** PHP remote file inclusion vulnerability in index.php in the JIM component for...CVE-2006-4556Disputed7.5 High
- joomla com comprofiler componentPHP remote file inclusion vulnerability in plugin.class.php in the com_comprofiler Components 1.0...CVE-2006-4553Public exploit6.8 Medium
- joomlaMultiple unspecified vulnerabilities in Joomla! before 1.0.11, related to "Injection Flaws,"...CVE-2006-44767.5 High
- joomlaJoomla! before 1.0.11 does not limit access to the Admin Popups functionality, which has unknown...CVE-2006-44757.5 High
- joomlaMultiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.0.11 allow remote...CVE-2006-44746.8 Medium
- joomlaUnspecified vulnerability in com_content in Joomla! before 1.0.11, when $mosConfig_hideEmail is...CVE-2006-44735.1 Medium
- joomla joomla\!Multiple unspecified vulnerabilities in Joomla! before 1.0.11 allow attackers to bypass user...CVE-2006-44727.5 High
- joomla joomla\!The Admin Upload Image functionality in Joomla! before 1.0.11 allows remote authenticated users...CVE-2006-44716.5 Medium
- joomla joomla\!Joomla! before 1.0.11 omits some checks for whether _VALID_MOS is defined, which allows attackers...CVE-2006-44707.5 High
- joomla joomla\!Unspecified vulnerability in PEAR.php in Joomla! before 1.0.11 allows remote attackers to perform...CVE-2006-44697.5 High
- joomla joomla\!Multiple unspecified vulnerabilities in Joomla! before 1.0.11, related to unvalidated input,...CVE-2006-44686.8 Medium
- joomlaJoomla! before 1.0.11 does not properly unset variables when the input data includes a numeric...CVE-2006-44665.0 Medium
- joomla rssxt component** DISPUTED ** Multiple PHP remote file inclusion vulnerabilities in the Rssxt component for...CVE-2006-4378Disputed7.5 High
- joomla x-shop component** DISPUTED ** PHP remote file inclusion vulnerability in admin.x-shop.php in the x-shop...CVE-2006-4269Disputed7.5 High
- joomla jim instant messaging componentPHP remote file inclusion vulnerability in install.jim.php in the JIM 1.0.1 component for Joomla...CVE-2006-4242Public exploit5.1 Medium
- joomla moslistmessenger componentPHP remote file inclusion vulnerability in archive.php in the mosListMessenger Component (com_lm)...CVE-2006-42297.5 High
- joomla webring componentPHP remote file inclusion vulnerability in admin.webring.docs.php in the Webring Component ...CVE-2006-4129Public exploit7.5 High
- Show moreLoading…