Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

joomla! vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2014-7228
Akeeba Restore (restore.php), as used in Joomla! 2.5.4 up to and including 2.5.25, 3.x up to and including 3.2.5, and 3.3.0 up to and including 3.3.4; Akeeba Backup for Joomla! Professional 3.0.0 up to and including 4.0.2; Backup Professional for WordPress 1.0.b1 up to and includ...
Joomla Joomla\\! 2.5.4Joomla Joomla\\! 2.5.11Joomla Joomla\\! 2.5.13Joomla Joomla\\! 2.5.18Joomla Joomla\\! 2.5.21Joomla Joomla\\! 3.0.2Joomla Joomla\\! 3.0.4Joomla Joomla\\! 3.1.6Joomla Joomla\\! 3.2.1Joomla Joomla\\! 3.3.0Joomla Joomla\\! 3.3.2Joomla Joomla\\! 2.5.5Joomla Joomla\\! 2.5.6Joomla Joomla\\! 2.5.7Joomla Joomla\\! 2.5.8Joomla Joomla\\! 2.5.9Joomla Joomla\\! 2.5.23Joomla Joomla\\! 2.5.24Joomla Joomla\\! 2.5.25Joomla Joomla\\! 3.0.0Joomla Joomla\\! 3.2.2Joomla Joomla\\! 3.2.3
NA
CVE-2014-7982
Cross-site scripting (XSS) vulnerability in Joomla! CMS 2.5.x prior to 2.5.19 and 3.x prior to 3.2.3 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors.
Joomla Joomla\\! 2.5.13Joomla Joomla\\! 2.5.14Joomla Joomla\\! 2.5.15Joomla Joomla\\! 2.5.16Joomla Joomla\\! 2.5.17Joomla Joomla\\! 3.0.3Joomla Joomla\\! 3.0.4Joomla Joomla\\! 3.1.0Joomla Joomla\\! 3.1.1Joomla Joomla\\! 2.5.1Joomla Joomla\\! 2.5.11Joomla Joomla\\! 2.5.18Joomla Joomla\\! 2.5.3Joomla Joomla\\! 3.0.0Joomla Joomla\\! 3.0.2Joomla Joomla\\! 3.1.2Joomla Joomla\\! 3.1.4Joomla Joomla\\! 2.5.0Joomla Joomla\\! 2.5.5Joomla Joomla\\! 2.5.6Joomla Joomla\\! 2.5.7Joomla Joomla\\! 2.5.8
NA
CVE-2014-7984
Joomla! CMS 2.5.x prior to 2.5.19 and 3.x prior to 3.2.3 allows remote malicious users to authenticate and bypass intended restrictions via vectors involving GMail authentication.
Joomla Joomla\\! 2.5.15Joomla Joomla\\! 2.5.16Joomla Joomla\\! 2.5.17Joomla Joomla\\! 2.5.18Joomla Joomla\\! 3.1.0Joomla Joomla\\! 3.1.1Joomla Joomla\\! 3.1.2Joomla Joomla\\! 3.1.3Joomla Joomla\\! 2.5.12Joomla Joomla\\! 2.5.14Joomla Joomla\\! 2.5.2Joomla Joomla\\! 2.5.4Joomla Joomla\\! 3.0.1Joomla Joomla\\! 3.0.3Joomla Joomla\\! 3.1.5Joomla Joomla\\! 3.2.0Joomla Joomla\\! 2.5.0Joomla Joomla\\! 2.5.1Joomla Joomla\\! 2.5.10Joomla Joomla\\! 2.5.6Joomla Joomla\\! 2.5.7Joomla Joomla\\! 2.5.8
NA
CVE-2014-7229
Unspecified vulnerability in Joomla! prior to 2.5.4 prior to 2.5.26, 3.x prior to 3.2.6, and 3.3.x prior to 3.3.5 allows malicious users to cause a denial of service via unspecified vectors.
Joomla Joomla\\! 2.5.23Joomla Joomla\\! 2.5.22Joomla Joomla\\! 2.5.21Joomla Joomla\\! 2.5.20Joomla Joomla\\! 2.5.19Joomla Joomla\\! 2.5.5Joomla Joomla\\! 2.5.4Joomla Joomla\\! 3.3.0Joomla Joomla\\! 3.3.1Joomla Joomla\\! 2.5.13Joomla Joomla\\! 2.5.12Joomla Joomla\\! 2.5.11Joomla Joomla\\! 2.5.10Joomla Joomla\\! 3.2.1Joomla Joomla\\! 3.2.2Joomla Joomla\\! 3.2.3Joomla Joomla\\! 3.2.4Joomla Joomla\\! 2.5.24Joomla Joomla\\! 2.5.16Joomla Joomla\\! 2.5.14Joomla Joomla\\! 2.5.9Joomla Joomla\\! 2.5.7
NA
CVE-2011-2710
Multiple cross-site scripting (XSS) vulnerabilities in Joomla! prior to 1.7.0 allow remote malicious users to inject arbitrary web script or HTML via (1) the URI to includes/application.php, reachable through index.php; and, when Internet Explorer or Konqueror is used, (2) allow ...
Joomla Joomla\\! 1.6Joomla Joomla\\! 1.6.4Joomla Joomla\\! 1.5.11Joomla Joomla\\! 1.6.3Joomla Joomla\\! 1.5.13Joomla Joomla\\! 1.5.3Joomla Joomla\\! 1.5.2Joomla Joomla\\! 1.5.22Joomla Joomla\\! 1.6.5Joomla Joomla\\! 1.5.9Joomla Joomla\\! 1.5.18Joomla Joomla\\!Joomla Joomla\\! 1.6.1Joomla Joomla\\! 1.5.16Joomla Joomla\\! 1.5.4Joomla Joomla\\! 1.6.0Joomla Joomla\\! 1.5.10Joomla Joomla\\! 1.5.7Joomla Joomla\\! 1.5.0Joomla Joomla\\! 1.5.15Joomla Joomla\\! 1.5.6Joomla Joomla\\! 1.5.1
NA
CVE-2011-2509
Multiple cross-site scripting (XSS) vulnerabilities in Joomla! prior to 1.6.4 allow remote malicious users to inject arbitrary web script or HTML via (1) the query string to the com_contact component, as demonstrated by the Itemid parameter to index.php; (2) the query string to t...
Joomla Joomla\\! 1.6Joomla Joomla\\! 1.5.11Joomla Joomla\\! 1.5.13Joomla Joomla\\! 1.5.3Joomla Joomla\\! 1.5.2Joomla Joomla\\! 1.5.22Joomla Joomla\\! 1.5.9Joomla Joomla\\! 1.5.18Joomla Joomla\\! 1.6.1Joomla Joomla\\! 1.5.16Joomla Joomla\\! 1.5.4Joomla Joomla\\! 1.6.0Joomla Joomla\\! 1.5.10Joomla Joomla\\! 1.5.7Joomla Joomla\\! 1.5.0Joomla Joomla\\!Joomla Joomla\\! 1.5.15Joomla Joomla\\! 1.5.6Joomla Joomla\\! 1.5.1Joomla Joomla\\! 1.5.23Joomla Joomla\\! 1.5.17Joomla Joomla\\! 1.5.8
7.3
CVSSv3
CVE-2015-8769
SQL injection vulnerability in Joomla! 3.x prior to 3.4.7 allows malicious users to execute arbitrary SQL commands via unspecified vectors.
Joomla Joomla\\! 3.4.2Joomla Joomla\\! 3.4.1Joomla Joomla\\! 3.1.1Joomla Joomla\\! 3.1.0Joomla Joomla\\! 3.2.3Joomla Joomla\\! 3.2.2Joomla Joomla\\! 3.4.6Joomla Joomla\\! 3.4.5Joomla Joomla\\! 3.3.3Joomla Joomla\\! 3.4.0Joomla Joomla\\! 3.3.4Joomla Joomla\\! 3.0.4Joomla Joomla\\! 3.0.3Joomla Joomla\\! 3.2.1Joomla Joomla\\! 3.2.0Joomla Joomla\\! 3.4.4Joomla Joomla\\! 3.4.3Joomla Joomla\\! 3.3.0Joomla Joomla\\! 3.1.2Joomla Joomla\\! 3.0.0Joomla Joomla\\! 3.2.4Joomla Joomla\\! 3.1.4
NA
CVE-2008-3226
The file caching implementation in Joomla! prior to 1.5.4 allows malicious users to access cached pages via unknown attack vectors.
Joomla Joomla 1.0.1Joomla Joomla 1.0.10Joomla Joomla 1.0.5Joomla Joomla 1.0.6Joomla Joomla 1.5.0 Beta2Joomla Joomla 1.5.0 Rc1Joomla Joomla 1.0.13Joomla Joomla 1.0.2Joomla Joomla 1.0.9Joomla Joomla 1.03Joomla JoomlaJoomla Joomla 1.0Joomla Joomla 1.0.0Joomla Joomla 1.0.3Joomla Joomla 1.0.4Joomla Joomla 1.5Joomla Joomla 1.5.0 BetaJoomla Joomla 1.5.0 Beta1Joomla Joomla 1.0.11Joomla Joomla 1.0.12Joomla Joomla 1.0.7Joomla Joomla 1.0.8
NA
CVE-2008-3228
Joomla! prior to 1.5.4 does not configure .htaccess to apply certain security checks that "block common exploits" to SEF URLs, which has unknown impact and remote attack vectors.
Joomla Joomla 1.0.1Joomla Joomla 1.0.10Joomla Joomla 1.0.5Joomla Joomla 1.0.6Joomla Joomla 1.5.0 Beta1Joomla Joomla 1.5.0 Beta2Joomla Joomla 1.5.0 Rc1Joomla Joomla 1.0.13Joomla Joomla 1.0.2Joomla Joomla 1.0.9Joomla Joomla 1.03Joomla JoomlaJoomla Joomla 1.0Joomla Joomla 1.0.0Joomla Joomla 1.0.3Joomla Joomla 1.0.4Joomla Joomla 1.5Joomla Joomla 1.5.0 BetaJoomla Joomla 1.0.11Joomla Joomla 1.0.12Joomla Joomla 1.0.7Joomla Joomla 1.0.8
NA
CVE-2008-3225
Joomla! prior to 1.5.4 allows malicious users to access administration functionality, which has unknown impact and attack vectors related to a missing "LDAP security fix."
Joomla Joomla 1.0.11Joomla Joomla 1.0.12Joomla Joomla 1.0.7Joomla Joomla 1.0.8Joomla Joomla 1.5.1Joomla Joomla 1.5.2Joomla Joomla 1.0.1Joomla Joomla 1.0.10Joomla Joomla 1.0.5Joomla Joomla 1.0.6Joomla Joomla 1.5.0 Beta1Joomla Joomla 1.5.0 Beta2Joomla Joomla 1.5.0 Rc1Joomla Joomla 1.0Joomla Joomla 1.0.0Joomla Joomla 1.0.3Joomla Joomla 1.0.4Joomla Joomla 1.5Joomla Joomla 1.5.0 BetaJoomla Joomla 1.0.13Joomla Joomla 1.0.2Joomla Joomla 1.0.9
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
injectionCVE-2024-30983CVE-2023-4235CVE-2024-21338privilegeencryptionCVE-2023-4232CVE-2024-31497CVE-2024-32341
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook