← Back

Corephp

corephp

2 CVEs • 2 products

Products (2)

Click to collapse
Toggle
Com Jphoto
com_jphoto
1 CVE
Pago Commerce
pago_commerce
1 CVE

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-25751
1Corephp
1Pago Commerce
Jun 17, 2026
Sep 18, 2020
N/A· v4
8.8 HIGH· v3
6.5 MEDIUM· v2
The paGO Commerce plugin 2.5.9.0 for Joomla! allows SQL Injection via the administrator/index.php?option=com_pago&view=comments filter_published parameter.
CVE-2009-4598
1Corephp
1Com Jphoto
Apr 23, 2026
Jan 12, 2010
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in the JPhoto (com_jphoto) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a category action to index.php.