Joomla

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2008-5200 1Joomla 1Com Xewebtv Apr 23, 2026 Nov 21, 2008 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in the Xe webtv (com_xewebtv) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action to index.php.
CVE-2008-5053 1Joomla 1Com Rssreader Apr 23, 2026 Nov 13, 2008 N/A· v4 N/A· v3 10.0 HIGH· v2 PHP remote file inclusion vulnerability in admin.rssreader.php in the Simple RSS Reader (com_rssreader) 1.0 component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_live_site...Show more PHP remote file inclusion vulnerability in admin.rssreader.php in the Simple RSS Reader (com_rssreader) 1.0 component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_live_site parameter.Show less
CVE-2008-4777 1Joomla 1Com Lms Apr 23, 2026 Oct 29, 2008 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in the Showroom Joomlearn LMS (com_lms) component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the cat parameter in a showTests task.
CVE-2008-4668 1Joomla 1Com Imagebrowser Apr 23, 2026 Oct 22, 2008 N/A· v4 N/A· v3 9.0 HIGH· v2 Directory traversal vulnerability in the Image Browser (com_imagebrowser) 0.1.5 component for Joomla! allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the folder parameter to ind...Show more Directory traversal vulnerability in the Image Browser (com_imagebrowser) 0.1.5 component for Joomla! allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the folder parameter to index.php.Show less
CVE-2008-4105 1Joomla 1Joomla Apr 23, 2026 Sep 18, 2008 N/A· v4 N/A· v3 7.5 HIGH· v2 JRequest in Joomla! 1.5 before 1.5.7 does not sanitize variables that were set with JRequest::setVar, which allows remote attackers to conduct "variable injection" attacks and have unspecified other impact.
CVE-2008-4104 1Joomla 1Joomla Apr 23, 2026 Sep 18, 2008 N/A· v4 N/A· v3 5.8 MEDIUM· v2 Multiple open redirect vulnerabilities in Joomla! 1.5 before 1.5.7 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a "passed in" URL.
CVE-2008-4103 1Joomla 1Com Mailto Apr 23, 2026 Sep 18, 2008 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The mailto (aka com_mailto) component in Joomla! 1.5 before 1.5.7 sends e-mail messages without validating the URL, which allows remote attackers to transmit spam.
CVE-2008-4102 1Joomla 1Joomla Apr 23, 2026 Sep 18, 2008 N/A· v4 N/A· v3 7.5 HIGH· v2 Joomla! 1.5 before 1.5.7 initializes PHP's PRNG with a weak seed, which makes it easier for attackers to guess the pseudo-random values produced by PHP's mt_rand function, as demonstrated by guessing password reset token...Show more Joomla! 1.5 before 1.5.7 initializes PHP's PRNG with a weak seed, which makes it easier for attackers to guess the pseudo-random values produced by PHP's mt_rand function, as demonstrated by guessing password reset tokens, a different vulnerability than CVE-2008-3681.Show less
CVE-2008-3681 1Joomla 1Com User Apr 23, 2026 Aug 14, 2008 N/A· v4 N/A· v3 7.5 HIGH· v2 components/com_user/models/reset.php in Joomla! 1.5 through 1.5.5 does not properly validate reset tokens, which allows remote attackers to reset the "first enabled user (lowest id)" password, typically for the administr...Show more components/com_user/models/reset.php in Joomla! 1.5 through 1.5.5 does not properly validate reset tokens, which allows remote attackers to reset the "first enabled user (lowest id)" password, typically for the administrator.Show less
CVE-2008-3586 1Joomla 1Com Ezstore Apr 23, 2026 Aug 11, 2008 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in the EZ Store (com_ezstore) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action to index.php.
CVE-2008-3265 1Joomla 1Com Dtregister Apr 23, 2026 Jul 24, 2008 N/A· v4 N/A· v3 6.8 MEDIUM· v2 SQL injection vulnerability in the DT Register (com_dtregister) 2.2.3 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the eventId parameter in a pay_options action to index.php.
CVE-2008-3228 1Joomla 1Joomla Apr 23, 2026 Jul 18, 2008 N/A· v4 N/A· v3 7.5 HIGH· v2 Joomla! before 1.5.4 does not configure .htaccess to apply certain security checks that "block common exploits" to SEF URLs, which has unknown impact and remote attack vectors.
CVE-2008-3227 1Joomla 1Joomla Apr 23, 2026 Jul 18, 2008 N/A· v4 N/A· v3 7.5 HIGH· v2 Unspecified vulnerability in Joomla! before 1.5.4 has unknown impact and attack vectors related to a "User Redirect Spam fix," possibly an open redirect vulnerability.
CVE-2008-3226 1Joomla 1Joomla Apr 23, 2026 Jul 18, 2008 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The file caching implementation in Joomla! before 1.5.4 allows attackers to access cached pages via unknown attack vectors.
CVE-2008-3225 1Joomla 1Joomla Apr 23, 2026 Jul 18, 2008 N/A· v4 N/A· v3 10.0 HIGH· v2 Joomla! before 1.5.4 allows attackers to access administration functionality, which has unknown impact and attack vectors related to a missing "LDAP security fix."
CVE-2008-3132 1Joomla 1Com Beamospetition Apr 23, 2026 Jul 10, 2008 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in the beamospetition (com_beamospetition) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the pet parameter to index.php.
CVE-2008-3083 2Brightcode Joomla 2Brightcode Weblinks Module Com Brightweblinks Apr 23, 2026 Jul 9, 2008 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in Brightcode Weblinks (com_brightweblinks) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter.
CVE-2008-2990 2Joomla Mambo 3Com Facileforms Com FacileformsJoomla Apr 23, 2026 Jul 2, 2008 N/A· v4 N/A· v3 7.5 HIGH· v2 PHP remote file inclusion vulnerability in facileforms.frame.php in the FacileForms (com_facileforms) component 1.4.4 for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the ff_compat...Show more PHP remote file inclusion vulnerability in facileforms.frame.php in the FacileForms (com_facileforms) component 1.4.4 for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the ff_compath parameter.Show less
CVE-2008-2892 2Feellove Joomla 2Com Expshop Exp Shop Component Apr 23, 2026 Jun 27, 2008 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in the EXP Shop (com_expshop) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a show_payment action to index.php.
CVE-2008-2701 1Joomla 1Com Gameq Apr 23, 2026 Jun 13, 2008 N/A· v4 N/A· v3 6.8 MEDIUM· v2 SQL injection vulnerability in the GameQ (com_gameq) component 4.0 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the category_id parameter in a page action to index.php.

Previous 1...171819...28 Next