Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

joomla joomla! 2.5.4 vulnerabilities and exploits

(subscribe to this query)
668
VMScore

CVE-2012-2747

Unspecified vulnerability in Joomla! 2.5.x prior to 2.5.5 allows remote malicious users to gain privileges via unknown attack vectors related to "Inadequate checking."
Joomla Joomla! 2.5.2Joomla Joomla! 2.5.1Joomla Joomla! 2.5.3Joomla Joomla! 2.5.4Joomla Joomla! 2.5.0
445
VMScore

CVE-2012-2748

Unspecified vulnerability in Joomla! 2.5.x prior to 2.5.5 allows remote malicious users to obtain sensitive information via vectors related to "Inadequate filtering" and a "SQL error."
Joomla Joomla! 2.5.2Joomla Joomla! 2.5.1Joomla Joomla! 2.5.3Joomla Joomla! 2.5.4Joomla Joomla! 2.5.0
383
VMScore

CVE-2012-4531

Cross-site scripting (XSS) vulnerability in Joomla! 2.5.x prior to 2.5.7 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors.
Joomla Joomla! 2.5.2Joomla Joomla! 2.5.1Joomla Joomla! 2.5.3Joomla Joomla! 2.5.4Joomla Joomla! 2.5.6Joomla Joomla! 2.5.5Joomla Joomla! 2.5.0
383
VMScore

CVE-2012-4532

Cross-site scripting (XSS) vulnerability in modules/mod_languages/tmpl/default.php in the Language Switcher module for Joomla! 2.5.x prior to 2.5.7 allows remote malicious users to inject arbitrary web script or HTML via the PATH_INFO to index.php. NOTE: some of these details are...
Joomla Joomla! 2.5.2Joomla Joomla! 2.5.1Joomla Joomla! 2.5.3Joomla Joomla! 2.5.4Joomla Joomla! 2.5.6Joomla Joomla! 2.5.5Joomla Joomla! 2.5.0
383
VMScore

CVE-2012-5827

Joomla! 2.5.x prior to 2.5.8 and 3.0.x prior to 3.0.2 allows remote malicious users to conduct clickjacking attacks via unspecified vectors involving "Inadequate protection."
Joomla Joomla! 2.5.7Joomla Joomla! 2.5.2Joomla Joomla! 2.5.1Joomla Joomla! 2.5.3Joomla Joomla! 2.5.4Joomla Joomla! 2.5.6Joomla Joomla! 2.5.5Joomla Joomla! 2.5.0
755
VMScore

CVE-2013-1453

plugins/system/highlight/highlight.php in Joomla! 3.0.x up to and including 3.0.2 and 2.5.x up to and including 2.5.8 allows malicious users to unserialize arbitrary PHP objects to obtain sensitive information, delete arbitrary directories, conduct SQL injection attacks, and poss...
Joomla Joomla! 2.5.7Joomla Joomla! 2.5.8Joomla Joomla! 3.0.2Joomla Joomla! 2.5.2Joomla Joomla! 2.5.1Joomla Joomla! 3.0.1Joomla Joomla! 2.5.3Joomla Joomla! 2.5.4Joomla Joomla! 2.5.6Joomla Joomla! 2.5.5Joomla Joomla! 3.0.0Joomla Joomla! 2.5.0
356
VMScore

CVE-2013-3057

Joomla! 2.5.x prior to 2.5.10 and 3.0.x prior to 3.0.4 allows remote authenticated users to bypass intended privilege requirements and list the privileges of arbitrary users via unspecified vectors.
Joomla Joomla! 2.5.7Joomla Joomla! 2.5.8Joomla Joomla! 2.5.2Joomla Joomla! 2.5.1Joomla Joomla! 2.5.3Joomla Joomla! 2.5.9Joomla Joomla! 2.5.4Joomla Joomla! 2.5.6Joomla Joomla! 2.5.5Joomla Joomla! 2.5.0Joomla Joomla! 3.0.2Joomla Joomla! 3.0.3Joomla Joomla! 3.0.1Joomla Joomla! 3.0.0
555
VMScore

CVE-2013-3242

plugins/system/remember/remember.php in Joomla! 2.5.x prior to 2.5.10 and 3.0.x prior to 3.0.4 does not properly handle an object obtained by unserializing a cookie, which allows remote authenticated users to conduct PHP object injection attacks and cause a denial of service via ...
Joomla Joomla! 3.0.2Joomla Joomla! 3.0.3Joomla Joomla! 3.0.1Joomla Joomla! 3.0.0Joomla Joomla! 2.5.7Joomla Joomla! 2.5.8Joomla Joomla! 2.5.2Joomla Joomla! 2.5.1Joomla Joomla! 2.5.3Joomla Joomla! 2.5.9Joomla Joomla! 2.5.4Joomla Joomla! 2.5.6Joomla Joomla! 2.5.5Joomla Joomla! 2.5.0
383
VMScore

CVE-2013-3058

Cross-site scripting (XSS) vulnerability in Joomla! 2.5.x prior to 2.5.10 and 3.0.x prior to 3.0.4 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors.
Joomla Joomla! 2.5.7Joomla Joomla! 2.5.8Joomla Joomla! 2.5.2Joomla Joomla! 2.5.1Joomla Joomla! 2.5.3Joomla Joomla! 2.5.9Joomla Joomla! 2.5.4Joomla Joomla! 2.5.6Joomla Joomla! 2.5.5Joomla Joomla! 2.5.0Joomla Joomla! 3.0.2Joomla Joomla! 3.0.3Joomla Joomla! 3.0.1Joomla Joomla! 3.0.0
383
VMScore

CVE-2013-3267

Cross-site scripting (XSS) vulnerability in the highlighter plugin in Joomla! 2.5.x prior to 2.5.10 and 3.0.x prior to 3.0.4 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors.
Joomla Joomla! 2.5.7Joomla Joomla! 2.5.8Joomla Joomla! 2.5.2Joomla Joomla! 2.5.1Joomla Joomla! 2.5.3Joomla Joomla! 2.5.9Joomla Joomla! 2.5.4Joomla Joomla! 2.5.6Joomla Joomla! 2.5.5Joomla Joomla! 2.5.0Joomla Joomla! 3.0.2Joomla Joomla! 3.0.3Joomla Joomla! 3.0.1Joomla Joomla! 3.0.0
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-6280CVE-2024-5346CVE-2024-30078CVE-2022-45803CVE-2024-36886SQLCVE-2024-24553IMAPmemory leak
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook