Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
joomla! vulnerabilities and exploits
(subscribe to this query)
668
VMScore
CVE-2006-1049
Multiple SQL injection vulnerabilities in the Admin functionality in Joomla! 1.0.7 and previous versions allow remote authenticated administrators to execute arbitrary SQL commands via unknown attack vectors.
Joomla Joomla 1.0.0
Joomla Joomla 1.0.1
Joomla Joomla 1.0.3
Joomla Joomla 1.0.5
Joomla Joomla 1.0.6
Joomla Joomla
Joomla Joomla 1.0.2
Joomla Joomla 1.0.4
383
VMScore
CVE-2014-7983
Cross-site scripting (XSS) vulnerability in com_contact in Joomla! CMS 3.1.2 up to and including 3.2.x prior to 3.2.3 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors.
Joomla Joomla\\! 3.1.2
Joomla Joomla\\! 3.1.3
Joomla Joomla\\! 3.1.4
Joomla Joomla\\! 3.1.6
Joomla Joomla\\! 3.2.1
Joomla Joomla\\! 3.1.5
Joomla Joomla\\! 3.2.2
Joomla Joomla\\! 3.2.0
445
VMScore
CVE-2006-1048
Joomla! 1.0.7 and previous versions allows malicious users to bypass intended access restrictions and gain certain privileges via certain attack vectors related to the (1) Weblink, (2) Polls, (3) Newsfeeds, (4) Weblinks, (5) Content, (6) Content Section, (7) Content Category, (8)...
Joomla Joomla 1.0.1
Joomla Joomla 1.0.2
Joomla Joomla 1.0.3
Joomla Joomla 1.0.4
Joomla Joomla 1.0.5
Joomla Joomla 1.0
Joomla Joomla 1.0.6
Joomla Joomla 1.0.7
755
VMScore
CVE-2012-1116
SQL injection vulnerability in Joomla! 1.7.x and 2.5.x prior to 2.5.2 allows remote malicious users to execute arbitrary SQL commands via unspecified vectors.
Joomla Joomla\\! 1.7.3
Joomla Joomla\\! 1.7.2
Joomla Joomla\\! 2.5.1
Joomla Joomla\\! 1.7.5
Joomla Joomla\\! 2.5.0
Joomla Joomla\\! 1.7.4
Joomla Joomla\\! 1.7.1
Joomla Joomla\\! 1.7.0
1 EDB exploit
383
VMScore
CVE-2012-5827
Joomla! 2.5.x prior to 2.5.8 and 3.0.x prior to 3.0.2 allows remote malicious users to conduct clickjacking attacks via unspecified vectors involving "Inadequate protection."
Joomla Joomla\\! 2.5.5
Joomla Joomla\\! 2.5.6
Joomla Joomla\\! 2.5.0
Joomla Joomla\\! 2.5.7
Joomla Joomla\\! 2.5.3
Joomla Joomla\\! 2.5.4
Joomla Joomla\\! 2.5.1
Joomla Joomla\\! 2.5.2
890
VMScore
CVE-2006-1047
Unspecified vulnerability in the "Remember Me login functionality" in Joomla! 1.0.7 and previous versions has unknown impact and attack vectors.
Joomla Joomla 1.0.6
Joomla Joomla 1.0.1
Joomla Joomla 1.0.2
Joomla Joomla 1.0.3
Joomla Joomla 1.0.4
Joomla Joomla 1.0.0
Joomla Joomla 1.0.5
Joomla Joomla 1.0.7
383
VMScore
CVE-2011-4332
Multiple cross-site scripting (XSS) vulnerabilities in Joomla! 1.6.3 and previous versions allow remote malicious users to inject arbitrary web script or HTML via unspecified vectors.
Joomla Joomla\\! 1.6.0
Joomla Joomla\\! 1.6.1
Joomla Joomla\\!
Joomla Joomla\\! 1.6
Joomla Joomla\\! 1.6.5
Joomla Joomla\\! 1.6.6
Joomla Joomla\\! 1.6.4
668
VMScore
CVE-2008-4102
Joomla! 1.5 prior to 1.5.7 initializes PHP's PRNG with a weak seed, which makes it easier for malicious users to guess the pseudo-random values produced by PHP's mt_rand function, as demonstrated by guessing password reset tokens, a different vulnerability than CVE-2008...
Joomla Joomla 1.5
Joomla Joomla 1.5.1
Joomla Joomla 1.5.2
Joomla Joomla 1.5.3
Joomla Joomla 1.5.4
Joomla Joomla 1.5.5
Joomla Joomla 1.5.6
668
VMScore
CVE-2008-4105
JRequest in Joomla! 1.5 prior to 1.5.7 does not sanitize variables that were set with JRequest::setVar, which allows remote malicious users to conduct "variable injection" attacks and have unspecified other impact.
Joomla Joomla 1.5
Joomla Joomla 1.5.1
Joomla Joomla 1.5.2
Joomla Joomla 1.5.3
Joomla Joomla 1.5.4
Joomla Joomla 1.5.5
Joomla Joomla 1.5.6
383
VMScore
CVE-2012-4532
Cross-site scripting (XSS) vulnerability in modules/mod_languages/tmpl/default.php in the Language Switcher module for Joomla! 2.5.x prior to 2.5.7 allows remote malicious users to inject arbitrary web script or HTML via the PATH_INFO to index.php. NOTE: some of these details are...
Joomla Joomla\\! 2.5.4
Joomla Joomla\\! 2.5.5
Joomla Joomla\\! 2.5.6
Joomla Joomla\\! 2.5.0
Joomla Joomla\\! 2.5.2
Joomla Joomla\\! 2.5.1
Joomla Joomla\\! 2.5.3
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injection
CVE-2006-4304
CVE-2023-26603
CVE-2024-28327
CVE-2023-50363
CVE-2024-21905
template injection
CVE-2024-3400
cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
4
5
6
7
8
9
10
NEXT »