Joomla

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2008-3227 1Joomla 1Joomla Apr 23, 2026 Jul 18, 2008 N/A· v4 N/A· v3 7.5 HIGH· v2 Unspecified vulnerability in Joomla! before 1.5.4 has unknown impact and attack vectors related to a "User Redirect Spam fix," possibly an open redirect vulnerability.
CVE-2008-3226 1Joomla 1Joomla Apr 23, 2026 Jul 18, 2008 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The file caching implementation in Joomla! before 1.5.4 allows attackers to access cached pages via unknown attack vectors.
CVE-2008-3225 1Joomla 1Joomla Apr 23, 2026 Jul 18, 2008 N/A· v4 N/A· v3 10.0 HIGH· v2 Joomla! before 1.5.4 allows attackers to access administration functionality, which has unknown impact and attack vectors related to a missing "LDAP security fix."
CVE-2008-3132 1Joomla 1Com Beamospetition Apr 23, 2026 Jul 10, 2008 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in the beamospetition (com_beamospetition) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the pet parameter to index.php.
CVE-2008-3083 2Brightcode Joomla 2Brightcode Weblinks Module Com Brightweblinks Apr 23, 2026 Jul 9, 2008 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in Brightcode Weblinks (com_brightweblinks) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter.
CVE-2008-2990 2Joomla Mambo 3Com Facileforms Com FacileformsJoomla Apr 23, 2026 Jul 2, 2008 N/A· v4 N/A· v3 7.5 HIGH· v2 PHP remote file inclusion vulnerability in facileforms.frame.php in the FacileForms (com_facileforms) component 1.4.4 for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the ff_compat...Show more PHP remote file inclusion vulnerability in facileforms.frame.php in the FacileForms (com_facileforms) component 1.4.4 for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the ff_compath parameter.Show less
CVE-2008-2892 2Feellove Joomla 2Com Expshop Exp Shop Component Apr 23, 2026 Jun 27, 2008 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in the EXP Shop (com_expshop) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a show_payment action to index.php.
CVE-2008-2701 1Joomla 1Com Gameq Apr 23, 2026 Jun 13, 2008 N/A· v4 N/A· v3 6.8 MEDIUM· v2 SQL injection vulnerability in the GameQ (com_gameq) component 4.0 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the category_id parameter in a page action to index.php.
CVE-2008-2697 2Joomla Rapid Source 2Com Rapidrecipe Rapid Recipe Apr 23, 2026 Jun 13, 2008 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in the Rapid Recipe (com_rapidrecipe) component 1.6.6 and 1.6.7 for Joomla! allows remote attackers to execute arbitrary SQL commands via the recipe_id parameter in a viewrecipe action to inde...Show more SQL injection vulnerability in the Rapid Recipe (com_rapidrecipe) component 1.6.6 and 1.6.7 for Joomla! allows remote attackers to execute arbitrary SQL commands via the recipe_id parameter in a viewrecipe action to index.php.Show less
CVE-2008-2692 1Joomla 1Com Yvcomment Apr 23, 2026 Jun 13, 2008 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in the yvComment (com_yvcomment) component 1.16.0 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the ArticleID parameter in a comment action to index.php...Show more SQL injection vulnerability in the yvComment (com_yvcomment) component 1.16.0 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the ArticleID parameter in a comment action to index.php.Show less
CVE-2008-2676 1Joomla 2Com News Portal Joomla Apr 23, 2026 Jun 12, 2008 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in the iJoomla News Portal (com_news_portal) component 1.0 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter to index.php.
CVE-2008-2651 1Joomla 1Com Joobb Apr 23, 2026 Jun 10, 2008 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in the Joomla! Bulletin Board (aka Joo!BB or com_joobb) component 0.5.9 for Joomla! allows remote attackers to execute arbitrary SQL commands via the forum parameter in a forum action to index...Show more SQL injection vulnerability in the Joomla! Bulletin Board (aka Joo!BB or com_joobb) component 0.5.9 for Joomla! allows remote attackers to execute arbitrary SQL commands via the forum parameter in a forum action to index.php.Show less
CVE-2008-2643 1Joomla 1Com Biblestudy Apr 23, 2026 Jun 10, 2008 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in the Bible Study (com_biblestudy) component before 6.0.7c for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a mediaplayer action to index.php.
CVE-2008-2633 1Joomla 2Com Joomradio Joomla Apr 23, 2026 Jun 10, 2008 N/A· v4 N/A· v3 7.5 HIGH· v2 Multiple SQL injection vulnerabilities in the EXP JoomRadio (com_joomradio) component 1.0 for Joomla! allow remote attackers to execute arbitrary SQL commands via the id parameter in a (1) show_radio or (2) show_video ac...Show more Multiple SQL injection vulnerabilities in the EXP JoomRadio (com_joomradio) component 1.0 for Joomla! allow remote attackers to execute arbitrary SQL commands via the id parameter in a (1) show_radio or (2) show_video action to index.php.Show less
CVE-2008-2632 1Joomla 2Com Acctexp Joomla Apr 23, 2026 Jun 10, 2008 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in the acctexp (com_acctexp) component 0.12.x and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the usage parameter in a subscribe action to index.php.
CVE-2008-2630 1Joomla 1Com Jb2 Apr 23, 2026 Jun 10, 2008 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in the JooBlog (com_jb2) component 0.1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the CategoryID parameter in a category action to index.php.
CVE-2008-2627 1Joomla 1Com Idoblog Apr 23, 2026 Jun 10, 2008 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in the IDoBlog (com_idoblog) component b24 and earlier and 1.0, a component for Joomla!, allows remote attackers to execute arbitrary SQL commands via the userid parameter in a userblog action...Show more SQL injection vulnerability in the IDoBlog (com_idoblog) component b24 and earlier and 1.0, a component for Joomla!, allows remote attackers to execute arbitrary SQL commands via the userid parameter in a userblog action to index.php.Show less
CVE-2008-2569 1Joomla 1Easybook Component Apr 23, 2026 Jun 6, 2008 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in the EasyBook (com_easybook) component 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the gbid parameter in a deleteentry action to index.php.
CVE-2008-2568 1Joomla 2Com Simpleshop Joomla Apr 23, 2026 Jun 6, 2008 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in the Simple Shop Galore (com_simpleshop) component 3.4 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a browse action to index.p...Show more SQL injection vulnerability in the Simple Shop Galore (com_simpleshop) component 3.4 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a browse action to index.php.Show less
CVE-2008-2564 1Joomla 2Com Jotloader Joomla Apr 23, 2026 Jun 6, 2008 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in the JotLoader (com_jotloader) component 1.2.1.a and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the cid parameter to index.php.

Previous 1...171819...27 Next