← Back

Phoca

phoca

3 CVEs • 3 products

Products (3)

Click to collapse
Toggle
Com Phocadocumentation
com_phocadocumentation
1 CVE
Maps
maps
1 CVE
Download
download
1 CVE

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2026-57828
1Phoca
1Download
Jul 14, 2026
Jul 11, 2026
9.0 CRITICAL· v4
8.8 HIGH· v3
N/A· v2
The Joomla extension Phoca Downloads is vulnerable to an authenticated arbitrary file upload that allows registered users uploading executable files and leads to full RCE.
CVE-2026-23900
1Phoca
1Maps
Jun 17, 2026
Apr 11, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Various stored XSS vulnerabilities in the maps- and icon rendering logic in Phoca Maps component 5.0.0-6.0.2 have been discovered.
CVE-2009-0702
1Phoca
1Com Phocadocumentation
Apr 23, 2026
Feb 23, 2009
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in the Phoca Documentation (com_phocadocumentation) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a section action to index.php.