Vulnérabilités

Vulnérabilités

Joomla CMS et extensions — une fiche par CVE, toutes sources fusionnées.

368 résultats

CVE-2013-7431 Full path disclosure in the Googlemaps plugin before 3.1 for Joomla!. googlemaps · 1 source · MEDIUM CVSS 5.3 CVE-2013-7430 Cross-site scripting (XSS) vulnerability in the Googlemaps plugin before 3.1 for Joomla! googlemaps · 1 source · MEDIUM CVSS 6.1 CVE-2015-4071 The Helpdesk Pro Plugin before 1.4.0 for Joomla! helpdesk_pro · 1 source · MEDIUM CVSS 5.3 CVE-2017-7627 The "Smart related articles" extension 1.1 for Joomla! smart_related_articles · 1 source · MEDIUM CVSS 5.3 CVE-2017-7626 The "Smart related articles" extension 1.1 for Joomla! smart_related_articles · 1 source · MEDIUM CVSS 6.1 CVE-2017-5673 In the Kunena extension 5.0.2 through 5.0.4 for Joomla!, the forum message subject (aka topic subject) accepts JavaScript, leading to XSS. kunena · 1 source · MEDIUM CVSS 6.1 CVE-2016-1000121 XSS and SQLi in Huge IT Joomla Slider v1.0.9 extension slider · 1 source · MEDIUM CVSS 4.8 CVE-2016-1000114 XSS in huge IT gallery v1.1.5 for Joomla gallery · 1 source · MEDIUM CVSS 6.1 CVE-2015-6919 Cross-site scripting (XSS) vulnerability in the googleSearch (CSE) (com_googlesearch_cse) component 3.0.2 for Joomla! googlesearch · 1 source · MEDIUM CVSS 4.3 CVE-2014-8606 Directory traversal vulnerability in the XCloner plugin 3.1.1 for WordPress and 3.5.1 for Joomla! xcloner · 1 source · MEDIUM CVSS 4.0 CVE-2014-8605 The XCloner plugin 3.1.1 for WordPress and 3.5.1 for Joomla! xcloner · 1 source · MEDIUM CVSS 5.0 CVE-2014-8604 The XCloner plugin 3.1.1 for WordPress and 3.5.1 for Joomla! xcloner · 1 source · MEDIUM CVSS 5.0 CVE-2014-8603 cloner.functions.php in the XCloner plugin 3.1.1 for WordPress and 3.5.1 for Joomla! xcloner · 1 source · MEDIUM CVSS 6.5 CVE-2015-1478 Cross-site scripting (XSS) vulnerability in the CMSJunkie J-ClassifiedsManager component for Joomla! j-classifiedsmanager · 1 source · MEDIUM CVSS 4.3 CVE-2014-100009 The Joomlaskin JS Multi Hotel (aka JS MultiHotel and Js-Multi-Hotel) plugin 2.2.1 and earlier for WordPress allows remote attackers to obtain the installation… Extension Joomla (identification incertaine) · 1 source · MEDIUM CVSS 5.0 CVE-2014-100008 Cross-site scripting (XSS) vulnerability in includes/delete_img.php in the Joomlaskin JS Multi Hotel (aka JS MultiHotel and Js-Multi-Hotel) plugin 2.2.1 and ea… Extension Joomla (identification incertaine) · 1 source · MEDIUM CVSS 4.3 CVE-2013-7419 Cross-site scripting (XSS) vulnerability in includes/refreshDate.php in the Joomlaskin JS Multi Hotel (aka JS MultiHotel and Js-Multi-Hotel) plugin 2.2.1 for W… Extension Joomla (identification incertaine) · 1 source · MEDIUM CVSS 4.3 CVE-2014-9103 Multiple cross-site scripting (XSS) vulnerabilities in the Kunena component before 3.0.6 for Joomla! kunena · 1 source · MEDIUM CVSS 4.3 CVE-2014-9102 Multiple SQL injection vulnerabilities in the Kunena component before 3.0.6 for Joomla! kunena · 1 source · MEDIUM CVSS 6.5 CVE-2014-3863 Cross-site scripting (XSS) vulnerability in the JChatSocial component before 2.3 for Joomla! jchatsocial · 1 source · MEDIUM CVSS 4.3