Vulnerability index

Browse CVEs

6 matching

Cards Compact

Filters 1 Clear all

Keyword

Severity

Any Critical High Medium Low

Technology

Recency

Analysis

Fix

Sort

Exploited (KEV) only

Filters apply as you choose them.

CRITICAL 9.8 CVE-2016-11020 Kunena before 5.0.4 does not restrict avatar file extensions to gif, jpeg, jpg, and png. This can lead to XSS and remote code execution.

Kunena 5.0.4+ Fix from $2,3002020-02-25 MEDIUM 5.4 CVE-2019-15120 The Kunena extension before 5.1.14 for Joomla! allows XSS via BBCode.

Kunena 5.1.14+ Fix from $1,6002019-08-16 MEDIUM 6.1 CVE-2017-5673 In the Kunena extension 5.0.2 through 5.0.4 for Joomla!, the forum message subject (aka topic subject) accepts JavaScript, leading to XSS. Six files …

Kunena No fix yet Fix from $1,6002017-03-22 MEDIUM 6.5 CVE-2014-9102 Multiple SQL injection vulnerabilities in the Kunena component before 3.0.6 for Joomla! allow remote authenticated users to execute arbitrary SQL com…

Kunena after 3.0.5 Fix from $1,6002014-11-26 HIGH 7.5 CVE-2012-4868 SQL injection vulnerability in news.php in the Kunena component 1.7.2 for Joomla! allows remote attackers to execute arbitrary SQL commands via the i… Kunena No fix yet Fix from $1,9502012-09-06 HIGH 7.5 CVE-2009-4550 SQL injection vulnerability in the Kunena Forum (com_kunena) component 1.5.3 and 1.5.4 for Joomla! allows remote attackers to execute arbitrary SQL c… Kunena Forum No fix yet Fix from $1,9502010-01-04