← Back

Chillcreations

chillcreations

4 CVEs • 4 products

Products (4)

Click to collapse
Toggle
Com Ccnewsletter
com_ccnewsletter
1 CVE
Com Ccinvoices
com_ccinvoices
1 CVE
Mod Ccnewsletter
mod_ccnewsletter
1 CVE
Ccnewsletter
ccnewsletter
1 CVE

CVEs (4)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2018-5989
1Chillcreations
1Ccnewsletter
Jun 17, 2026
Feb 17, 2018
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
SQL Injection exists in the ccNewsletter 2.x component for Joomla! via the id parameter in a task=removeSubscriber action, a related issue to CVE-2011-5099.
CVE-2011-5099
1Chillcreations
1Mod Ccnewsletter
Apr 29, 2026
Aug 14, 2012
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in helper/popup.php in the ccNewsletter (mod_ccnewsletter) component 1.0.7 through 1.0.9 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2010-4853
1Chillcreations
1Com Ccinvoices
Apr 29, 2026
Oct 5, 2011
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in the ccInvoices (com_ccinvoices) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a viewInv action to index.php.
CVE-2010-0467
1Chillcreations
1Com Ccnewsletter
Apr 29, 2026
Feb 2, 2010
N/A· v4
5.8 MEDIUM· v3
5.0 MEDIUM· v2
Directory traversal vulnerability in the ccNewsletter (com_ccnewsletter) component 1.0.5 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter in a ccnewsletter action...Show more
Directory traversal vulnerability in the ccNewsletter (com_ccnewsletter) component 1.0.5 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter in a ccnewsletter action to index.php.Show less