Browse CVEs

HIGH 7.5 CVE-2013-1453 plugins/system/highlight/highlight.php in Joomla! 3.0.x through 3.0.2 and 2.5.x through 2.5.8 allows attackers to unserialize arbitrary PHP objects t… Joomla\! No fix yet Fix from $1,9502013-02-13 MEDIUM 5.0 CVE-2013-1454 Joomla! 3.0.x through 3.0.2 allows attackers to obtain sensitive information via unspecified vectors related to "Coding errors." Joomla\! No fix yet Fix from $1,6002013-02-13 MEDIUM 5.0 CVE-2013-1455 Joomla! 3.0.x through 3.0.2 allows attackers to obtain sensitive information via unspecified vectors related to an "Undefined variable." Joomla\! Mitigation only Fix from $1,6002013-02-13 HIGH 7.5 CVE-2012-1598 Joomla! 1.5.x before 1.5.26 has unspecified impact and attack vectors related to "insufficient randomness" and a "password reset vulnerability." Joomla\! Mitigation only Fix from $1,9502012-12-03 MEDIUM 5.0 CVE-2012-1599 Joomla! 1.5.x before 1.5.26 does not properly check permissions, which allows attackers to obtain sensitive "administrative back end information" via… Joomla\! Mitigation only Fix from $1,6002012-12-03 HIGH 7.5 CVE-2012-1116 SQL injection vulnerability in Joomla! 1.7.x and 2.5.x before 2.5.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Joomla\! Mitigation only Fix from $1,9502012-09-26 MEDIUM 5.0 CVE-2012-1611 Joomla! 2.5.x before 2.5.4 does not properly check permissions, which allows attackers to obtain sensitive "administrative back end" information via … Joomla\! Mitigation only Fix from $1,6002012-09-06 MEDIUM 5.0 CVE-2012-3829 Joomla! 2.5.3 allows remote attackers to obtain the installation path via the Host HTTP Header. Joomla\! No fix yet Fix from $1,6002012-07-03 HIGH 7.5 CVE-2012-2747 Unspecified vulnerability in Joomla! 2.5.x before 2.5.5 allows remote attackers to gain privileges via unknown attack vectors related to "Inadequate … Joomla\! No fix yet Fix from $1,9502012-07-03 MEDIUM 5.0 CVE-2012-2748 Unspecified vulnerability in Joomla! 2.5.x before 2.5.5 allows remote attackers to obtain sensitive information via vectors related to "Inadequate fi… Joomla\! Mitigation only Fix from $1,6002012-07-03 MEDIUM 5.0 CVE-2011-4321 The password reset functionality in Joomla! 1.5.x through 1.5.24 uses weak random numbers, which makes it easier for remote attackers to change the p… Joomla\! Mitigation only Fix from $1,6002011-11-23 HIGH 7.5 CVE-2010-4944 SQL injection vulnerability in the Elite Experts (com_elite_experts) component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL… Com Elite Experts No fix yet Fix from $1,9502011-10-09 HIGH 7.5 CVE-2010-4945 SQL injection vulnerability in the CamelcityDB (com_camelcitydb2) component 2.2 for Joomla! allows remote attackers to execute arbitrary SQL commands… Com Camelcitydb2 No fix yet Fix from $1,9502011-10-09 HIGH 7.5 CVE-2010-4938 SQL injection vulnerability in the Weblinks (com_weblinks) component in Joomla! allows remote attackers to execute arbitrary SQL commands via the Ite… Com Weblinks No fix yet Fix from $1,9502011-10-09 MEDIUM 5.0 CVE-2011-3747 Joomla! 1.6.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an … Joomla\! No fix yet Fix from $1,6002011-09-23 MEDIUM 5.0 CVE-2011-2891 Joomla! 1.6.x before 1.6.2 allows remote attackers to obtain sensitive information via an empty Itemid array parameter to index.php, which reveals th… Joomla\! No fix yet Fix from $1,6002011-07-27 HIGH 7.5 CVE-2010-4696 Multiple SQL injection vulnerabilities in Joomla! 1.5.x before 1.5.22 allow remote attackers to execute arbitrary SQL commands via the (1) filter_ord… Joomla\! Mitigation only Fix from $1,9502011-01-18 HIGH 7.5 CVE-2010-4166 Multiple SQL injection vulnerabilities in Joomla! 1.5.x before 1.5.22 allow remote attackers to execute arbitrary SQL commands via (1) the filter_ord… Joomla\! No fix yet Fix from $1,9502011-01-18 HIGH 7.5 CVE-2010-2681 PHP remote file inclusion vulnerability in the SEF404x (com_sef) component for Joomla! allows remote attackers to execute arbitrary PHP code via a UR… Com Sef No fix yet Fix from $1,9502010-07-12 HIGH 7.5 CVE-2010-2679 SQL injection vulnerability in the Weblinks (com_weblinks) component in Joomla! allows remote attackers to execute arbitrary SQL commands via the id … Com Weblinks No fix yet Fix from $1,9502010-07-08 HIGH 7.5 CVE-2010-1739 SQL injection vulnerability in the Newsfeeds (com_newsfeeds) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the … Com Newsfeeds No fix yet Fix from $1,9502010-05-06 MEDIUM 6.5 CVE-2010-0461 SQL injection vulnerability in the casino (com_casino) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id… Com Casino No fix yet Fix from $1,6002010-01-28 HIGH 7.5 CVE-2010-0373 SQL injection vulnerability in the libros (com_libros) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id par… Com Libros No fix yet Fix from $1,9502010-01-21 HIGH 7.5 CVE-2009-4583 SQL injection vulnerability in the DhForum (com_dhforum) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id p… Com Dhforum No fix yet Fix from $1,9502010-01-06 HIGH 7.5 CVE-2008-6923 SQL injection vulnerability in the content component (com_content) 1.0.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via th… Com Content No fix yet Fix from $1,9502009-08-10 HIGH 7.5 CVE-2008-6852 SQL injection vulnerability in the Ice Gallery (com_ice) component 0.5 beta 2 for Joomla! allows remote attackers to execute arbitrary SQL commands v… Joomla\! No fix yet Fix from $1,9502009-07-07 HIGH 7.5 CVE-2009-2239 SQL injection vulnerability in the (1) casinobase (com_casinobase), (2) casino_blackjack (com_casino_blackjack), and (3) casino_videopoker (com_casin… Com Casiino Blackjack No fix yet Fix from $1,9502009-06-27 HIGH 7.5 CVE-2009-2014 SQL injection vulnerability in the ComSchool (com_school) component 1.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the… Com School No fix yet Fix from $1,9502009-06-09 HIGH 7.5 CVE-2009-1736 SQL injection vulnerability in the GridSupport (GS) Ticket System (com_gsticketsystem) component for Joomla! allows remote attackers to execute arbit… Com Gsticketsystem No fix yet Fix from $1,9502009-05-20 HIGH 7.5 CVE-2009-1499 SQL injection vulnerability in the MailTo (aka com_mailto) component in Joomla! allows remote attackers to execute arbitrary SQL commands via the art… Joomla\! No fix yet Fix from $1,9502009-05-01