Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
joomla joomla vulnerabilities and exploits
(subscribe to this query)
7.5
CVSSv2
CVE-2006-1049
Multiple SQL injection vulnerabilities in the Admin functionality in Joomla! 1.0.7 and previous versions allow remote authenticated administrators to execute arbitrary SQL commands via unknown attack vectors.
Joomla Joomla 1.0.0
Joomla Joomla 1.0.1
Joomla Joomla 1.0.3
Joomla Joomla 1.0.5
Joomla Joomla 1.0.6
Joomla Joomla
Joomla Joomla 1.0.2
Joomla Joomla 1.0.4
7.5
CVSSv2
CVE-2012-1116
SQL injection vulnerability in Joomla! 1.7.x and 2.5.x prior to 2.5.2 allows remote malicious users to execute arbitrary SQL commands via unspecified vectors.
Joomla Joomla\\! 1.7.3
Joomla Joomla\\! 1.7.2
Joomla Joomla\\! 2.5.1
Joomla Joomla\\! 1.7.5
Joomla Joomla\\! 2.5.0
Joomla Joomla\\! 1.7.4
Joomla Joomla\\! 1.7.1
Joomla Joomla\\! 1.7.0
1 EDB exploit
4.3
CVSSv2
CVE-2014-7983
Cross-site scripting (XSS) vulnerability in com_contact in Joomla! CMS 3.1.2 up to and including 3.2.x prior to 3.2.3 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors.
Joomla Joomla\\! 3.1.2
Joomla Joomla\\! 3.1.3
Joomla Joomla\\! 3.1.4
Joomla Joomla\\! 3.1.6
Joomla Joomla\\! 3.2.1
Joomla Joomla\\! 3.1.5
Joomla Joomla\\! 3.2.2
Joomla Joomla\\! 3.2.0
5
CVSSv2
CVE-2006-1048
Joomla! 1.0.7 and previous versions allows malicious users to bypass intended access restrictions and gain certain privileges via certain attack vectors related to the (1) Weblink, (2) Polls, (3) Newsfeeds, (4) Weblinks, (5) Content, (6) Content Section, (7) Content Category, (8)...
Joomla Joomla 1.0.1
Joomla Joomla 1.0.2
Joomla Joomla 1.0.3
Joomla Joomla 1.0.4
Joomla Joomla 1.0.5
Joomla Joomla 1.0
Joomla Joomla 1.0.6
Joomla Joomla 1.0.7
4.3
CVSSv2
CVE-2012-5827
Joomla! 2.5.x prior to 2.5.8 and 3.0.x prior to 3.0.2 allows remote malicious users to conduct clickjacking attacks via unspecified vectors involving "Inadequate protection."
Joomla Joomla\\! 2.5.5
Joomla Joomla\\! 2.5.6
Joomla Joomla\\! 2.5.0
Joomla Joomla\\! 2.5.7
Joomla Joomla\\! 2.5.3
Joomla Joomla\\! 2.5.4
Joomla Joomla\\! 2.5.1
Joomla Joomla\\! 2.5.2
10
CVSSv2
CVE-2006-1047
Unspecified vulnerability in the "Remember Me login functionality" in Joomla! 1.0.7 and previous versions has unknown impact and attack vectors.
Joomla Joomla 1.0.6
Joomla Joomla 1.0.1
Joomla Joomla 1.0.2
Joomla Joomla 1.0.3
Joomla Joomla 1.0.4
Joomla Joomla 1.0.0
Joomla Joomla 1.0.5
Joomla Joomla 1.0.7
4.3
CVSSv2
CVE-2011-4332
Multiple cross-site scripting (XSS) vulnerabilities in Joomla! 1.6.3 and previous versions allow remote malicious users to inject arbitrary web script or HTML via unspecified vectors.
Joomla Joomla\\! 1.6.0
Joomla Joomla\\! 1.6.1
Joomla Joomla\\!
Joomla Joomla\\! 1.6
Joomla Joomla\\! 1.6.5
Joomla Joomla\\! 1.6.6
Joomla Joomla\\! 1.6.4
7.5
CVSSv2
CVE-2008-4102
Joomla! 1.5 prior to 1.5.7 initializes PHP's PRNG with a weak seed, which makes it easier for malicious users to guess the pseudo-random values produced by PHP's mt_rand function, as demonstrated by guessing password reset tokens, a different vulnerability than CVE-2008...
Joomla Joomla 1.5
Joomla Joomla 1.5.1
Joomla Joomla 1.5.2
Joomla Joomla 1.5.3
Joomla Joomla 1.5.4
Joomla Joomla 1.5.5
Joomla Joomla 1.5.6
5.8
CVSSv2
CVE-2008-4104
Multiple open redirect vulnerabilities in Joomla! 1.5 prior to 1.5.7 allow remote malicious users to redirect users to arbitrary web sites and conduct phishing attacks via a "passed in" URL.
Joomla Joomla 1.5
Joomla Joomla 1.5.1
Joomla Joomla 1.5.2
Joomla Joomla 1.5.3
Joomla Joomla 1.5.6
Joomla Joomla 1.5.4
Joomla Joomla 1.5.5
7.5
CVSSv2
CVE-2008-4105
JRequest in Joomla! 1.5 prior to 1.5.7 does not sanitize variables that were set with JRequest::setVar, which allows remote malicious users to conduct "variable injection" attacks and have unspecified other impact.
Joomla Joomla 1.5
Joomla Joomla 1.5.1
Joomla Joomla 1.5.2
Joomla Joomla 1.5.3
Joomla Joomla 1.5.4
Joomla Joomla 1.5.5
Joomla Joomla 1.5.6
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48654
CVE-2024-2757
authentication bypass
CVE-2024-3194
CVE-2024-33640
CVE-2024-21111
dos
insecure direct object reference
CVE-2024-21345
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
4
5
6
7
8
9
10
NEXT »