Browse CVEs

HIGH 7.5 CVE-2007-6272 Multiple SQL injection vulnerabilities in index.php in Joomla! 1.5 RC3 allow remote attackers to execute arbitrary SQL commands via (1) the view para… Joomla No fix yet Fix from $1,9502007-12-07 MEDIUM 6.8 CVE-2007-5457EPSS 38% Multiple PHP remote file inclusion vulnerabilities in Michael Dempfle Joomla Flash Uploader (com_jfu or com_joomla_flash_uploader) 2.5.1 component fo… Joomla No fix yet Fix from $1,6002007-10-14 MEDIUM 6.8 CVE-2007-5451EPSS 31% PHP remote file inclusion vulnerability in admin.color.php in the com_colorlab (aka com_color) 1.0 component for Joomla! allows remote attackers to e… Joomla No fix yet Fix from $1,6002007-10-14 MEDIUM 6.8 CVE-2007-5410EPSS 5% PHP remote file inclusion vulnerability in admin.wmtrssreader.php in the webmaster-tips.net Flash RSS Reader (com_wmtrssreader) 1.0 component for Joo… Joomla No fix yet Fix from $1,6002007-10-12 MEDIUM 6.8 CVE-2007-5389 PHP remote file inclusion vulnerability in preview.php in the swMenuFree (com_swmenufree) 4.6 component for Joomla! allows remote attackers to execut… Joomla Mitigation only Fix from $1,6002007-10-12 MEDIUM 6.8 CVE-2007-5362EPSS 37% Multiple PHP remote file inclusion vulnerabilities in the Avant-Garde Solutions MOSMedia Lite (com_mosmedia) 4.5.1 component for Mambo and Joomla! al… Joomla No fix yet Fix from $1,6002007-10-11 MEDIUM 6.8 CVE-2007-5363EPSS 31% PHP remote file inclusion vulnerability in admin.panoramic.php in the Panoramic Picture Viewer (com_panoramic) mambot (plugin) 1.0 for Joomla! allows… Joomla No fix yet Fix from $1,6002007-10-11 MEDIUM 6.8 CVE-2007-5309EPSS 6% PHP remote file inclusion vulnerability in admin.wmtgallery.php in the webmaster-tips.net Flash Image Gallery (com_wmtgallery) 1.0 component for Joom… Joomla No fix yet Fix from $1,6002007-10-09 MEDIUM 6.8 CVE-2007-5310 PHP remote file inclusion vulnerability in admin.wmtportfolio.php in the webmaster-tips.net wmtportfolio 1.0 (com_wmtportfolio) component for Joomla!… Joomla No fix yet Fix from $1,6002007-10-09 HIGH 7.5 CVE-2007-5065EPSS 42% PHP remote file inclusion vulnerability in admin.slideshow1.php in the Flash Slide Show (com_slideshow) component for Joomla! allows remote attackers… Joomla No fix yet Fix from $1,9502007-09-24 MEDIUM 6.8 CVE-2007-4954EPSS 29% PHP remote file inclusion vulnerability in admin.joom12pic.php in the joom12Pic (com_joom12pic) 1.0 component for Joomla! allows remote attackers to … Joom12pic Component No fix yet Fix from $1,6002007-09-18 MEDIUM 6.8 CVE-2007-4955EPSS 30% PHP remote file inclusion vulnerability in admin.joomlaflashfun.php in the Flash Fun! (com_joomlaflashfun) 1.0 component for Joomla! allows remote at… Flash Fun Component No fix yet Fix from $1,6002007-09-18 MEDIUM 6.8 CVE-2007-4923EPSS 42% PHP remote file inclusion vulnerability in admin.joomlaradiov5.php in the Joomla Radio 5 (com_joomlaradiov5) component for Joomla! allows remote atta… Joomla Radio No fix yet Fix from $1,6002007-09-17 HIGH 7.5 CVE-2007-4184 SQL injection vulnerability in administrator/popups/pollwindow.php in Joomla! 1.0.12 allows remote attackers to execute arbitrary SQL commands via th… Joomla Mitigation only Fix from $1,9502007-08-08 HIGH 7.5 CVE-2007-4187EPSS 11% Multiple eval injection vulnerabilities in the com_search component in Joomla! 1.5 beta before RC1 (aka Mapya) allow remote attackers to execute arbi… Joomla Mitigation only Fix from $1,9502007-08-08 MEDIUM 6.8 CVE-2007-4186EPSS 6% PHP remote file inclusion vulnerability in admin.tour_toto.php in the Tour de France Pool (com_tour_toto) 1.0.1 module for Joomla! allows remote atta… Tour De France Pool No fix yet Fix from $1,6002007-08-08 MEDIUM 5.0 CVE-2007-4185 Joomla! 1.0.12 allows remote attackers to obtain sensitive information via a direct request for (1) Stat.php (2) OutputFilter.php, (3) OutputCache.ph… Joomla Mitigation only Fix from $1,6002007-08-08 HIGH 7.5 CVE-2007-3932EPSS 6% uploadimg.php in the Expose RC35 and earlier (com_expose) component for Joomla! sends an error message but does not exit when it detects an attempt t… Expose No fix yet Fix from $1,9502007-07-21 MEDIUM 6.8 CVE-2007-3130 Multiple PHP remote file inclusion vulnerabilities in the OpenWiki (formerly JD-Wiki) component (com_jd-wiki) 1.0.2, and possibly earlier, for Joomla… Jd Wiki No fix yet Fix from $1,6002007-06-08 MEDIUM 6.8 CVE-2007-2199EPSS 47% PHP remote file inclusion vulnerability in lib/pcltar.lib.php (aka pcltar.php) in the PclTar module 1.3 and 1.3.1 for Vincent Blavet PhpConcept Libra… Joomla No fix yet Fix from $1,6002007-04-24 MEDIUM 6.8 CVE-2007-2196 PHP remote file inclusion vulnerability in jambook.php in the Jambook (com_Jambook) 1.0 beta7 module for Mambo and Joomla! allows remote attackers to… Jambook Mitigation only Fix from $1,6002007-04-24 MEDIUM 6.8 CVE-2007-2005EPSS 7% Multiple PHP remote file inclusion vulnerabilities in the Taskhopper 1.1 component for Mambo and Joomla! allow remote attackers to execute arbitrary … Taskhopper Component No fix yet Fix from $1,6002007-04-12 HIGH 10.0 CVE-2007-1699EPSS 11% Multiple PHP remote file inclusion vulnerabilities in the SWmenu (com_swmenupro and com_swmenufree) 4.0 component for Mambo and Joomla! allow remote … Swmenu Component No fix yet Fix from $1,9502007-03-27 HIGH 9.3 CVE-2007-1596EPSS 8% Multiple PHP remote file inclusion vulnerabilities in the NFN Address Book (com_nfn_addressbook) 0.4 component for Mambo and Joomla! allow remote att… Nfn Address Book No fix yet Fix from $1,9502007-03-22 HIGH 7.5 CVE-2006-7123 Multiple SQL injection vulnerabilities in BSQ Sitestats (component for Joomla) 1.8.0, and possibly other versions before 2.2.1, allow remote attacker… Bsq Sitestats Mitigation only Fix from $1,9502007-03-06 MEDIUM 6.8 CVE-2006-6962 PHP remote file inclusion vulnerability in rsgallery2.html.php in the RS Gallery2 component (com_rsgallery2) 1.11.2 for Joomla! allows attackers to e… Rs Gallery2 No fix yet Fix from $1,6002007-01-29 HIGH 7.5 CVE-2007-0387 SQL injection vulnerability in models/category.php in the Weblinks component for Joomla! SVN 20070118 (com_weblinks) allows remote attackers to execu… Joomla Mitigation only Fix from $1,9502007-01-19 MEDIUM 6.8 CVE-2007-0373EPSS 12% Multiple SQL injection vulnerabilities in Joomla! 1.5.0 Beta allow remote attackers to execute arbitrary SQL commands via (1) the searchword paramete… Joomla No fix yet Fix from $1,6002007-01-19 MEDIUM 5.0 CVE-2007-0375 Joomla! 1.5.0 Beta allows remote attackers to obtain sensitive information via a direct request for (1) plugins/user/example.php; (2) gmail.php, (3) … Joomla No fix yet Fix from $1,6002007-01-19 HIGH 7.5 CVE-2006-6843 PHP remote file inclusion vulnerability in the BE IT EasyPartner 0.0.9 beta component for Joomla! allows remote attackers to execute arbitrary PHP co… Be It Easypartner Component Mitigation only Fix from $1,9502006-12-31