Vulnérabilités
Joomla CMS et extensions — une fiche par CVE, toutes sources fusionnées.
CVE-2007-5407
Multiple PHP remote file inclusion vulnerabilities in the JContentSubscription (com_jcs) 1.5.8 component for Joomla!
MEDIUM
CVSS 6.8
CVE-2007-5389
PHP remote file inclusion vulnerability in preview.php in the swMenuFree (com_swmenufree) 4.6 component for Joomla!
MEDIUM
CVSS 6.8
CVE-2007-5363
PHP remote file inclusion vulnerability in admin.panoramic.php in the Panoramic Picture Viewer (com_panoramic) mambot (plugin) 1.0 for Joomla!
MEDIUM
CVSS 6.8
CVE-2007-5362
Multiple PHP remote file inclusion vulnerabilities in the Avant-Garde Solutions MOSMedia Lite (com_mosmedia) 4.5.1 component for Mambo and Joomla!
MEDIUM
CVSS 6.8
CVE-2007-5310
PHP remote file inclusion vulnerability in admin.wmtportfolio.php in the webmaster-tips.net wmtportfolio 1.0 (com_wmtportfolio) component for Joomla!
MEDIUM
CVSS 6.8
CVE-2007-5309
PHP remote file inclusion vulnerability in admin.wmtgallery.php in the webmaster-tips.net Flash Image Gallery (com_wmtgallery) 1.0 component for Joomla!
MEDIUM
CVSS 6.8
CVE-2007-4955
PHP remote file inclusion vulnerability in admin.joomlaflashfun.php in the Flash Fun!
MEDIUM
CVSS 6.8
CVE-2007-4954
PHP remote file inclusion vulnerability in admin.joom12pic.php in the joom12Pic (com_joom12pic) 1.0 component for Joomla!
MEDIUM
CVSS 6.8
CVE-2007-4923
PHP remote file inclusion vulnerability in admin.joomlaradiov5.php in the Joomla Radio 5 (com_joomlaradiov5) component for Joomla!
MEDIUM
CVSS 6.8
CVE-2007-4781
administrator/index.php in the installer component (com_installer) in Joomla!
MEDIUM
CVSS 6.6
CVE-2007-4780
Joomla! 1.5 before RC2 (aka Endeleo) allows remote attackers to obtain sensitive information (the full path) via unspecified vectors, probably involving direct…
MEDIUM
CVSS 6.8
CVE-2007-4779
Cross-site scripting (XSS) vulnerability in Joomla!
MEDIUM
CVSS 4.3
CVE-2007-4504
Directory traversal vulnerability in index.php in the RSfiles component (com_rsfiles) 1.0.2 and earlier for Joomla!
MEDIUM
CVSS 5.0
CVE-2007-4190
CRLF injection vulnerability in Joomla!
MEDIUM
CVSS 4.3
CVE-2007-4189
Multiple cross-site scripting (XSS) vulnerabilities in Joomla!
MEDIUM
CVSS 4.3
CVE-2007-4186
PHP remote file inclusion vulnerability in admin.tour_toto.php in the Tour de France Pool (com_tour_toto) 1.0.1 module for Joomla!
MEDIUM
CVSS 6.8
CVE-2007-4185
Joomla! 1.0.12 allows remote attackers to obtain sensitive information via a direct request for (1) Stat.php (2) OutputFilter.php, (3) OutputCache.php, (4) Mod…
MEDIUM
CVSS 5.0
CVE-2007-3249
Cross-site scripting (XSS) vulnerability in mod_lettermansubscribe.php in the Letterman Subscriber (mod_letterman) before 1.2.5 module for Joomla!
MEDIUM
CVSS 4.3
CVE-2007-3130
Multiple PHP remote file inclusion vulnerabilities in the OpenWiki (formerly JD-Wiki) component (com_jd-wiki) 1.0.2, and possibly earlier, for Joomla!
MEDIUM
CVSS 6.8
CVE-2007-2319
PHP remote file inclusion vulnerability in the AutoStand 1.1 and earlier module for Joomla!
MEDIUM
CVSS 6.8