← Back

Com Ckforms

com_ckforms

Vendor: Cookex • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Cookex
1Com Ckforms
Apr 29, 2026
Apr 9, 2010
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Directory traversal vulnerability in the Cookex Agency CKForms (com_ckforms) component 1.3.3 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.
1Cookex
1Com Ckforms
Apr 29, 2026
Apr 9, 2010
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in the Cookex Agency CKForms (com_ckforms) component 1.3.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the fid parameter in a detail action to index.php.