Skip to contentJoomla vulnerabilities
Newest
- joomlaMultiple cross-site scripting (XSS) vulnerabilities in Joomla! 1.5 through 1.5.9 allow remote...CVE-2009-12792.6 Low
- joomla com mycontentSQL injection vulnerability in the MyContent (com_mycontent) component 1.1.13 for Joomla! allows...CVE-2008-6430Public exploit7.5 High
- joomlaMultiple cross-site scripting (XSS) vulnerabilities in Joomla! 1.5.7 and earlier allow remote...CVE-2008-62993.5 Low
- joomla com musicaSQL injection vulnerability in the com_musica module in Joomla! and Mambo allows remote attackers...CVE-2008-6234Public exploit7.5 High
- joomla ignitegallerySQL injection vulnerability in the Ignite Gallery (com_ignitegallery) component 0.8.0 through 0.8...CVE-2008-6182Public exploit7.5 High
- joomla com eventingSQL injection vulnerability in the Eventing (com_eventing) 1.6.x component for Joomla! allows...CVE-2009-0421Public exploit7.5 High
- joomla com pcchessSQL injection vulnerability in the Prince Clan Chess Club (com_pcchess) component for Joomla!...CVE-2009-0379Public exploit7.5 High
- joomla com beamospetitionCross-site scripting (XSS) vulnerability in index.php in the beamospetition (com_beamospetition)...CVE-2009-0378Public exploit4.3 Medium
- joomla com beamospetitionSQL injection vulnerability in the beamospetition (com_beamospetition) 1.0.12 component for...CVE-2009-0377Public exploit7.5 High
- joomla com waticketsystemSQL injection vulnerability in the WebAmoeba (WA) Ticket System (com_waticketsystem) component...CVE-2009-0333Public exploit7.5 High
- joomla com pccookbookSQL injection vulnerability in the PcCookBook (com_pccookbook) component for Joomla! allows...CVE-2009-0329Public exploit7.5 High
- joomla xstandardDirectory traversal vulnerability in attachmentlibrary.php in the XStandard component for Joomla!...CVE-2009-0113Public exploit5.0 Medium
- joomla com paxgallerySQL injection vulnerability in the PaxGallery (com_paxgallery) component 0.1 for Joomla! allows...CVE-2008-5811Public exploit7.5 High
- joomla joomla\!Joomla! 1.5.8 does not set the secure flag for the session cookie in an https session, which...CVE-2008-41227.5 High
- joomlaPHP remote file inclusion vulnerability in index.php in Joomla! 1.0.11 through 1.0.14, when...CVE-2008-56717.5 High
- joomla com booksSQL injection vulnerability in the Books (com_books) component for Joomla! allows remote...CVE-2008-5643Public exploit7.5 High
- joomla com datsogallerySQL injection vulnerability in sub_votepic.php in the Datsogallery (com_datsogallery) module 1.6...CVE-2008-5208Public exploit7.5 High
- joomla com xewebtvSQL injection vulnerability in the Xe webtv (com_xewebtv) component for Joomla! allows remote...CVE-2008-5200Public exploit7.5 High
- joomla com rssreaderPHP remote file inclusion vulnerability in admin.rssreader.php in the Simple RSS Reader ...CVE-2008-5053Public exploitEPSS 64.1%10.0 High
- joomla com lmsSQL injection vulnerability in the Showroom Joomlearn LMS (com_lms) component for Joomla! and...CVE-2008-4777Public exploit7.5 High
- joomla com imagebrowserDirectory traversal vulnerability in the Image Browser (com_imagebrowser) 0.1.5 component for...CVE-2008-4668Public exploitEPSS 21.5%9.0 High
- joomlaJRequest in Joomla! 1.5 before 1.5.7 does not sanitize variables that were set with JRequest:...CVE-2008-41057.5 High
- joomlaJoomla! Open Redirect vulnerabilityCVE-2008-4104Fix available5.8 Medium
- joomla com mailtoThe mailto (aka com_mailto) component in Joomla! 1.5 before 1.5.7 sends e-mail messages without...CVE-2008-41035.0 Medium
- joomlaJoomla! 1.5 before 1.5.7 initializes PHP's PRNG with a weak seed, which makes it easier for...CVE-2008-41027.5 High
- joomla com usercomponents/com_user/models/reset.php in Joomla! 1.5 through 1.5.5 does not properly validate...CVE-2008-3681Public exploit7.5 High
- joomla com ezstoreSQL injection vulnerability in the EZ Store (com_ezstore) component for Joomla! allows remote...CVE-2008-3586Public exploit7.5 High
- joomla com dtregisterSQL injection vulnerability in the DT Register (com_dtregister) 2.2.3 component for Joomla!...CVE-2008-3265Public exploit6.8 Medium
- joomlaJoomla! doesn't configure .htaccess to apply certain security checks that "block common exploits" to SEF URLsCVE-2008-3228Fix available7.5 High
- joomlaJoomla! Open Redirect vulnerabilityCVE-2008-3227Fix available7.5 High
- joomlaJoomla! allows attackers to access cached pagesCVE-2008-3226Fix available5.0 Medium
- joomlaJoomla! before 1.5.4 allows attackers to access administration functionality, which has unknown...CVE-2008-322510.0 High
- joomla com beamospetitionSQL injection vulnerability in the beamospetition (com_beamospetition) component for Joomla!...CVE-2008-3132Public exploit7.5 High
- brightcode weblinks module, joomla com brightweblinks +1 moreSQL injection vulnerability in Brightcode Weblinks (com_brightweblinks) component for Joomla!...CVE-2008-3083Public exploit7.5 High
- joomla, joomla com facileforms +1 morePHP remote file inclusion vulnerability in facileforms.frame.php in the FacileForms ...CVE-2008-2990Public exploit7.5 High
- feellove exp shop component, joomla com expshop +1 moreSQL injection vulnerability in the EXP Shop (com_expshop) component 1.0 for Joomla! allows remote...CVE-2008-2892Public exploit7.5 High
- joomla com gameqSQL injection vulnerability in the GameQ (com_gameq) component 4.0 and earlier for Joomla! allows...CVE-2008-2701Public exploit6.8 Medium
- rapid-source rapid recipe, joomla com rapidrecipe +1 moreSQL injection vulnerability in the Rapid Recipe (com_rapidrecipe) component 1.6.6 and 1.6.7 for...CVE-2008-2697Public exploit7.5 High
- joomla com yvcommentSQL injection vulnerability in the yvComment (com_yvcomment) component 1.16.0 and earlier for...CVE-2008-2692Public exploit7.5 High
- joomla, joomla com news portal +1 moreSQL injection vulnerability in the iJoomla News Portal (com_news_portal) component 1.0 and...CVE-2008-2676Public exploit7.5 High
- joomla com joobbSQL injection vulnerability in the Joomla! Bulletin Board (aka Joo!BB or com_joobb) component 0.5...CVE-2008-2651Public exploit7.5 High
- joomla com biblestudySQL injection vulnerability in the Bible Study (com_biblestudy) component before 6.0.7c for...CVE-2008-2643Public exploit7.5 High
- joomla, joomla com joomradio +1 moreMultiple SQL injection vulnerabilities in the EXP JoomRadio (com_joomradio) component 1.0 for...CVE-2008-2633Public exploit7.5 High
- joomla, joomla com acctexp +1 moreSQL injection vulnerability in the acctexp (com_acctexp) component 0.12.x and earlier for Joomla!...CVE-2008-2632Public exploit7.5 High
- joomla com jb2SQL injection vulnerability in the JooBlog (com_jb2) component 0.1.1 for Joomla! allows remote...CVE-2008-2630Public exploit7.5 High
- joomla com idoblogSQL injection vulnerability in the IDoBlog (com_idoblog) component b24 and earlier and 1.0, a...CVE-2008-2627Public exploit7.5 High
- joomla easybook componentSQL injection vulnerability in the EasyBook (com_easybook) component 1.1 for Joomla! allows...CVE-2008-2569Public exploit7.5 High
- joomla, joomla com simpleshop +1 moreSQL injection vulnerability in the Simple Shop Galore (com_simpleshop) component 3.4 and earlier...CVE-2008-2568Public exploit7.5 High
- joomla, joomla com jotloader +1 moreSQL injection vulnerability in the JotLoader (com_jotloader) component 1.2.1.a and earlier for...CVE-2008-2564Public exploit7.5 High
- joomla com xsstream-dmSQL injection vulnerability in the xsstream-dm (com_xsstream-dm) component 0.01 Beta for Joomla!...CVE-2008-2454Public exploit7.5 High
- Show moreLoading…