Vulnérabilités
Joomla CMS et extensions — une fiche par CVE, toutes sources fusionnées.
CVE-2007-5389
PHP remote file inclusion vulnerability in preview.php in the swMenuFree (com_swmenufree) 4.6 component for Joomla!
MEDIUM
CVSS 6.8
CVE-2007-5363
PHP remote file inclusion vulnerability in admin.panoramic.php in the Panoramic Picture Viewer (com_panoramic) mambot (plugin) 1.0 for Joomla!
MEDIUM
CVSS 6.8
CVE-2007-5362
Multiple PHP remote file inclusion vulnerabilities in the Avant-Garde Solutions MOSMedia Lite (com_mosmedia) 4.5.1 component for Mambo and Joomla!
MEDIUM
CVSS 6.8
CVE-2007-5310
PHP remote file inclusion vulnerability in admin.wmtportfolio.php in the webmaster-tips.net wmtportfolio 1.0 (com_wmtportfolio) component for Joomla!
MEDIUM
CVSS 6.8
CVE-2007-5309
PHP remote file inclusion vulnerability in admin.wmtgallery.php in the webmaster-tips.net Flash Image Gallery (com_wmtgallery) 1.0 component for Joomla!
MEDIUM
CVSS 6.8
CVE-2007-5065
PHP remote file inclusion vulnerability in admin.slideshow1.php in the Flash Slide Show (com_slideshow) component for Joomla!
HIGH
CVSS 7.5
CVE-2007-4923
PHP remote file inclusion vulnerability in admin.joomlaradiov5.php in the Joomla Radio 5 (com_joomlaradiov5) component for Joomla!
MEDIUM
CVSS 6.8
CVE-2007-4781
administrator/index.php in the installer component (com_installer) in Joomla!
MEDIUM
CVSS 6.6
CVE-2007-4780
Joomla! 1.5 before RC2 (aka Endeleo) allows remote attackers to obtain sensitive information (the full path) via unspecified vectors, probably involving direct…
MEDIUM
CVSS 6.8
CVE-2007-4779
Cross-site scripting (XSS) vulnerability in Joomla!
MEDIUM
CVSS 4.3
CVE-2007-4778
Multiple SQL injection vulnerabilities in the content component (com_content) in Joomla!
HIGH
CVSS 7.5
CVE-2007-4777
SQL injection vulnerability in Joomla!
HIGH
CVSS 7.5
CVE-2007-4190
CRLF injection vulnerability in Joomla!
MEDIUM
CVSS 4.3
CVE-2007-4189
Multiple cross-site scripting (XSS) vulnerabilities in Joomla!
MEDIUM
CVSS 4.3
CVE-2007-4188
Session fixation vulnerability in Joomla!
HIGH
CVSS 9.3
CVE-2007-4187
Multiple eval injection vulnerabilities in the com_search component in Joomla!
HIGH
CVSS 7.5
CVE-2007-4185
Joomla! 1.0.12 allows remote attackers to obtain sensitive information via a direct request for (1) Stat.php (2) OutputFilter.php, (3) OutputCache.php, (4) Mod…
MEDIUM
CVSS 5.0
CVE-2007-4184
SQL injection vulnerability in administrator/popups/pollwindow.php in Joomla!
HIGH
CVSS 7.5
CVE-2007-2199
PHP remote file inclusion vulnerability in lib/pcltar.lib.php (aka pcltar.php) in the PclTar module 1.3 and 1.3.1 for Vincent Blavet PhpConcept Library, as use…
MEDIUM
CVSS 6.8
CVE-2006-7010
The mosgetparam implementation in Joomla!
HIGH
CVSS 7.5