Vulnerability index

Browse CVEs

6 matching

Cards Compact

Filters 1 Clear all

Keyword

Severity

Any Critical High Medium Low

Technology

Recency

Analysis

Fix

Sort

Exploited (KEV) only

Filters apply as you choose them.

Kunena CRITICAL 9.8

CVE-2016-11020

Kunena before 5.0.4 does not restrict avatar file extensions to gif, jpeg, jpg, and png. This can lead to XSS and remote code execution.

Fix: 5.0.4+

Fix from $2,300 2020-02-25

Kunena MEDIUM 5.4

CVE-2019-15120

The Kunena extension before 5.1.14 for Joomla! allows XSS via BBCode.

Fix: 5.1.14+

Fix from $1,600 2019-08-16

Kunena MEDIUM 6.1

CVE-2017-5673

In the Kunena extension 5.0.2 through 5.0.4 for Joomla!, the forum message subject (aka topic subject) accepts JavaScript, leading to XSS. Six files …

No fix yet

Fix from $1,600 2017-03-22

Kunena MEDIUM 6.5

CVE-2014-9102

Multiple SQL injection vulnerabilities in the Kunena component before 3.0.6 for Joomla! allow remote authenticated users to execute arbitrary SQL com…

Fix: after 3.0.5

Fix from $1,600 2014-11-26

Kunena HIGH 7.5

CVE-2012-4868

SQL injection vulnerability in news.php in the Kunena component 1.7.2 for Joomla! allows remote attackers to execute arbitrary SQL commands via the i…

No fix yet

Fix from $1,950 2012-09-06

Kunena Forum HIGH 7.5

CVE-2009-4550

SQL injection vulnerability in the Kunena Forum (com_kunena) component 1.5.3 and 1.5.4 for Joomla! allows remote attackers to execute arbitrary SQL c…

No fix yet

Fix from $1,950 2010-01-04