Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
joomla! vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2006-1049
Multiple SQL injection vulnerabilities in the Admin functionality in Joomla! 1.0.7 and previous versions allow remote authenticated administrators to execute arbitrary SQL commands via unknown attack vectors.
Joomla Joomla 1.0.0
Joomla Joomla 1.0.1
Joomla Joomla 1.0.3
Joomla Joomla 1.0.5
Joomla Joomla 1.0.6
Joomla Joomla
Joomla Joomla 1.0.2
Joomla Joomla 1.0.4
NA
CVE-2012-1116
SQL injection vulnerability in Joomla! 1.7.x and 2.5.x prior to 2.5.2 allows remote malicious users to execute arbitrary SQL commands via unspecified vectors.
Joomla Joomla\\! 1.7.3
Joomla Joomla\\! 1.7.2
Joomla Joomla\\! 2.5.1
Joomla Joomla\\! 1.7.5
Joomla Joomla\\! 2.5.0
Joomla Joomla\\! 1.7.4
Joomla Joomla\\! 1.7.1
Joomla Joomla\\! 1.7.0
1 EDB exploit
NA
CVE-2006-1048
Joomla! 1.0.7 and previous versions allows malicious users to bypass intended access restrictions and gain certain privileges via certain attack vectors related to the (1) Weblink, (2) Polls, (3) Newsfeeds, (4) Weblinks, (5) Content, (6) Content Section, (7) Content Category, (8)...
Joomla Joomla 1.0.1
Joomla Joomla 1.0.2
Joomla Joomla 1.0.3
Joomla Joomla 1.0.4
Joomla Joomla 1.0.5
Joomla Joomla 1.0
Joomla Joomla 1.0.6
Joomla Joomla 1.0.7
NA
CVE-2006-1047
Unspecified vulnerability in the "Remember Me login functionality" in Joomla! 1.0.7 and previous versions has unknown impact and attack vectors.
Joomla Joomla 1.0.6
Joomla Joomla 1.0.1
Joomla Joomla 1.0.2
Joomla Joomla 1.0.3
Joomla Joomla 1.0.4
Joomla Joomla 1.0.0
Joomla Joomla 1.0.5
Joomla Joomla 1.0.7
NA
CVE-2012-5827
Joomla! 2.5.x prior to 2.5.8 and 3.0.x prior to 3.0.2 allows remote malicious users to conduct clickjacking attacks via unspecified vectors involving "Inadequate protection."
Joomla Joomla\\! 2.5.5
Joomla Joomla\\! 2.5.6
Joomla Joomla\\! 2.5.0
Joomla Joomla\\! 2.5.7
Joomla Joomla\\! 2.5.3
Joomla Joomla\\! 2.5.4
Joomla Joomla\\! 2.5.1
Joomla Joomla\\! 2.5.2
NA
CVE-2014-7983
Cross-site scripting (XSS) vulnerability in com_contact in Joomla! CMS 3.1.2 up to and including 3.2.x prior to 3.2.3 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors.
Joomla Joomla\\! 3.1.2
Joomla Joomla\\! 3.1.3
Joomla Joomla\\! 3.1.4
Joomla Joomla\\! 3.1.6
Joomla Joomla\\! 3.2.1
Joomla Joomla\\! 3.1.5
Joomla Joomla\\! 3.2.2
Joomla Joomla\\! 3.2.0
NA
CVE-2011-4332
Multiple cross-site scripting (XSS) vulnerabilities in Joomla! 1.6.3 and previous versions allow remote malicious users to inject arbitrary web script or HTML via unspecified vectors.
Joomla Joomla\\! 1.6.0
Joomla Joomla\\! 1.6.1
Joomla Joomla\\!
Joomla Joomla\\! 1.6
Joomla Joomla\\! 1.6.5
Joomla Joomla\\! 1.6.6
Joomla Joomla\\! 1.6.4
NA
CVE-2012-4531
Cross-site scripting (XSS) vulnerability in Joomla! 2.5.x prior to 2.5.7 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors.
Joomla Joomla\\! 2.5.1
Joomla Joomla\\! 2.5.2
Joomla Joomla\\! 2.5.5
Joomla Joomla\\! 2.5.6
Joomla Joomla\\! 2.5.0
Joomla Joomla\\! 2.5.3
Joomla Joomla\\! 2.5.4
NA
CVE-2012-4532
Cross-site scripting (XSS) vulnerability in modules/mod_languages/tmpl/default.php in the Language Switcher module for Joomla! 2.5.x prior to 2.5.7 allows remote malicious users to inject arbitrary web script or HTML via the PATH_INFO to index.php. NOTE: some of these details are...
Joomla Joomla\\! 2.5.4
Joomla Joomla\\! 2.5.5
Joomla Joomla\\! 2.5.6
Joomla Joomla\\! 2.5.0
Joomla Joomla\\! 2.5.2
Joomla Joomla\\! 2.5.1
Joomla Joomla\\! 2.5.3
NA
CVE-2008-4102
Joomla! 1.5 prior to 1.5.7 initializes PHP's PRNG with a weak seed, which makes it easier for malicious users to guess the pseudo-random values produced by PHP's mt_rand function, as demonstrated by guessing password reset tokens, a different vulnerability than CVE-2008...
Joomla Joomla 1.5
Joomla Joomla 1.5.1
Joomla Joomla 1.5.2
Joomla Joomla 1.5.3
Joomla Joomla 1.5.4
Joomla Joomla 1.5.5
Joomla Joomla 1.5.6
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
client side
CVE-2023-31889
template injection
CVE-2024-4304
CVE-2006-4304
CVE-2024-33272
type confusion
CVE-2024-21345
CVE-2024-33271
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
4
5
6
7
8
9
10
NEXT »