Skip to contentJoomla vulnerabilities
Newest
- joomla joomla\!Joomla! 1.7.x before 1.7.5 and 2.5.x before 2.5.1 allows attackers to obtain the installation...CVE-2012-08375.0 Medium
- joomla joomla\!Unspecified vulnerability in Joomla! 1.7.x before 1.7.5 allows attackers to read the error log...CVE-2012-08365.0 Medium
- joomla joomla\!Unspecified vulnerability in Joomla! 1.7.x before 1.7.5 and 2.5.x before 2.5.1 allows attackers...CVE-2012-08355.0 Medium
- joomla joomla\!Cross-site scripting (XSS) vulnerability in Joomla! 1.6 and 1.7.x before 1.7.4 allows remote...CVE-2012-08224.3 Medium
- joomla joomla\!Unspecified vulnerability in Joomla! 1.6.x and 1.7.x before 1.7.4 allows remote attackers to...CVE-2012-08215.0 Medium
- joomla joomla\!Cross-site scripting (XSS) vulnerability in Joomla! 1.6.x and 1.7.x before 1.7.4 allows remote...CVE-2012-08204.3 Medium
- joomla joomla\!Unspecified vulnerability in Joomla! 1.6.x and 1.7.x before 1.7.4 allows remote attackers to...CVE-2012-08195.0 Medium
- joomla com weblinksSQL injection vulnerability in the Weblinks (com_weblinks) component for Joomla! and Mambo 1.0.9...CVE-2006-7247Public exploit7.5 High
- joomla joomla\!Joomla! 2.5.3 allows remote attackers to obtain the installation path via the Host HTTP Header.CVE-2012-38295.0 Medium
- joomla joomla\!Cross-site scripting (XSS) vulnerability in Joomla! 2.5.3 allows remote attackers to inject...CVE-2012-38284.3 Medium
- joomla joomla\!Unspecified vulnerability in Joomla! 2.5.x before 2.5.5 allows remote attackers to obtain...CVE-2012-27485.0 Medium
- joomla joomla\!Unspecified vulnerability in Joomla! 2.5.x before 2.5.5 allows remote attackers to gain...CVE-2012-27477.5 High
- joomla joomla\!Joomla! vulnerable to Cross-site ScriptingCVE-2011-4332Fix available4.3 Medium
- joomla joomla\!The password reset functionality in Joomla! 1.5.x through 1.5.24 uses weak random numbers, which...CVE-2011-43215.0 Medium
- joomla com camelcitydb2SQL injection vulnerability in the CamelcityDB (com_camelcitydb2) component 2.2 for Joomla!...CVE-2010-4945Public exploit7.5 High
- joomla com elite expertsSQL injection vulnerability in the Elite Experts (com_elite_experts) component for Mambo and...CVE-2010-4944Public exploit7.5 High
- joomla com weblinksSQL injection vulnerability in the Weblinks (com_weblinks) component in Joomla! allows remote...CVE-2010-4938Public exploit7.5 High
- joomla joomla\!Joomla! 1.6.0 allows remote attackers to obtain sensitive information via a direct request to a ...CVE-2011-37475.0 Medium
- joomla joomla\!Joomla! 1.6.x before 1.6.2 does not prevent page rendering inside a frame in a third-party HTML...CVE-2011-28924.3 Medium
- joomla joomla\!Joomla! 1.6.x before 1.6.2 allows remote attackers to obtain sensitive information via an empty...CVE-2011-28915.0 Medium
- joomla joomla\!The MediaViewMedia class in administrator/components/com_media/views/media/view.html.php in...CVE-2011-28905.0 Medium
- joomla joomla\!templates/system/error.php in Joomla! before 1.5.23 might allow remote attackers to obtain...CVE-2011-28895.0 Medium
- joomla joomla\!Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.7.0 allow remote...CVE-2011-27104.3 Medium
- joomla joomla\!Joomla! vulnerable to Cross-site ScriptingCVE-2011-2509Fix available4.3 Medium
- joomla joomla\!Joomla! before 1.5.23 does not properly check for errors, which allows remote attackers to obtain...CVE-2011-24885.0 Medium
- joomla joomla\!Multiple SQL injection vulnerabilities in Joomla! 1.5.x before 1.5.22 allow remote attackers to...CVE-2010-46967.5 High
- joomla joomla\!Multiple SQL injection vulnerabilities in Joomla! 1.5.x before 1.5.22 allow remote attackers to...CVE-2010-41667.5 High
- joomla com searchCross-site scripting (XSS) vulnerability in the com_search module for Joomla! 1.0.x through 1.0...CVE-2011-0005Public exploit4.3 Medium
- joomla joomla\!Cross-site scripting (XSS) vulnerability in Joomla! 1.5.x before 1.5.21 and 1.6.x before 1.6.1...CVE-2010-37124.3 Medium
- joomla joomla\!Multiple cross-site scripting (XSS) vulnerabilities in the Back End in Joomla! 1.5.x before 1.5...CVE-2010-25353.5 Low
- joomla com sefPHP remote file inclusion vulnerability in the SEF404x (com_sef) component for Joomla! allows...CVE-2010-2681Public exploit7.5 High
- joomla com weblinks, joomla\! +1 moreSQL injection vulnerability in the Weblinks (com_weblinks) component in Joomla! allows remote...CVE-2010-2679Public exploit7.5 High
- joomla joomla\!Joomla! vulnerable to Cross-site ScriptingCVE-2010-1649Fix available4.3 Medium
- joomla com newsfeedsSQL injection vulnerability in the Newsfeeds (com_newsfeeds) component for Joomla! allows remote...CVE-2010-1739Public exploit7.5 High
- joomla com casinoSQL injection vulnerability in the casino (com_casino) component 1.0 for Joomla! allows remote...CVE-2010-0461Public exploit6.5 Medium
- joomla com librosSQL injection vulnerability in the libros (com_libros) component for Joomla! allows remote...CVE-2010-0373Public exploit7.5 High
- joomla com dhforumSQL injection vulnerability in the DhForum (com_dhforum) component for Joomla! allows remote...CVE-2009-4583Public exploit7.5 High
- joomla com artistavenueCross-site scripting (XSS) vulnerability in the Artist avenue (com_artistavenue) component for...CVE-2009-45794.3 Medium
- joomla joomla\!Joomla! before 1.5.15 allows remote attackers to read an extension's XML file, and thereby obtain...CVE-2009-39465.0 Medium
- joomla joomla\!Unspecified vulnerability in the Front-End Editor in the com_content component in Joomla! before...CVE-2009-39455.5 Medium
- joomla com contentSQL injection vulnerability in the content component (com_content) 1.0.0 for Joomla! allows...CVE-2008-6923Public exploit7.5 High
- joomla joomla\!, markus donhauser ice gallery component for joomla +1 moreSQL injection vulnerability in the Ice Gallery (com_ice) component 0.5 beta 2 for Joomla! allows...CVE-2008-6852Public exploit7.5 High
- joomla com casiino blackjack, com casino videopoker, com casinobase +2 moreSQL injection vulnerability in the (1) casinobase (com_casinobase), (2) casino_blackjack ...CVE-2009-2239Public exploit7.5 High
- joomla com schoolSQL injection vulnerability in the ComSchool (com_school) component 1.4 for Joomla! allows remote...CVE-2009-2014Public exploit7.5 High
- joomlaCross-site scripting (XSS) vulnerability in the administrator panel in the com_users core...CVE-2009-19404.3 Medium
- joomlaCross-site scripting (XSS) vulnerability in the JA_Purity template for Joomla! 1.5.x through 1.5...CVE-2009-19394.3 Medium
- joomlaCross-site scripting (XSS) vulnerability in Joomla! 1.5.x through 1.5.10 allows remote attackers...CVE-2009-1938Public exploit4.3 Medium
- joomla com gsticketsystemSQL injection vulnerability in the GridSupport (GS) Ticket System (com_gsticketsystem) component...CVE-2009-1736Public exploit7.5 High
- joomla com mailto, joomla\! +1 moreSQL injection vulnerability in the MailTo (aka com_mailto) component in Joomla! allows remote...CVE-2009-1499Public exploit7.5 High
- joomlaMultiple cross-site request forgery (CSRF) vulnerabilities in the com_media component for Joomla!...CVE-2009-12806.8 Medium
- Show moreLoading…