Joomla! vulnerabilities

Newest CVEs

• CVE-2011-4908

  TinyBrowser plugin for Joomla! before 1.5.13 allows arbitrary file upload via upload.php.

  Joomla! · TinyBrowser Plugin

  Critical9.8
• CVE-2011-4906

  Tiny browser in TinyMCE 3.0 editor in Joomla! before 1.5.13 allows file upload and arbitrary PHP code execution.

  Joomla! · Tiny browser included with TinyMCE 3.0

  Critical9.8
• CVE-2011-1151

  Joomla! 1.6.0 is vulnerable to SQL Injection via the filter_order and filer_order_Dir parameters.

  Joomla! · Joomla!

  Critical9.1
• CVE-2011-4912

  Joomla! com_mailto 1.5.x through 1.5.13 has an automated mail timeout bypass.

  Joomla! · Joomla!

  Medium5.3
• CVE-2011-3629

  Joomla! core 1.7.1 allows information disclosure due to weak encryption

  Joomla! · Joomla! core

  High7.5
• CVE-2011-4937

  Joomla! 1.7.1 has core information disclosure due to inadequate error checking.

  Joomla! · Joomla!

  High7.5
• CVE-2011-3595

  Multiple Cross-site Scripting (XSS) vulnerabilities exist in Joomla! through 1.7.0 in index.php in the search word, extension, asset, and author parameters.

  Joomla! · Joomla!

  Medium5.4
• CVE-2011-4907

  Joomla! 1.5x through 1.5.12: Missing JEXEC Check

  Joomla! · Joomla!

  Medium5.3
• CVE-2012-1563

  Joomla! before 2.5.3 allows Admin Account Creation.

  Joomla! · Joomla!

  High7.5
• CVE-2012-1562

  Joomla! core before 2.5.3 allows unauthorized password change.

  Joomla! · Joomla! core

  High7.5