VYPR
← Joomla

Vendor CVEs

Joomla

All CVEs

1,051 total · sorted by risk
  • CVE-2010-1952May 19, 2010
    Joomla
    BeeHeard
    risk 0.04cvss —epss 0.13

    Directory traversal vulnerability in the BeeHeard (com_beeheard) and BeeHeard Lite (com_beeheardlite) component 1.0 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.

  • CVE-2010-1878May 12, 2010
    Joomla
    OrgChart
    risk 0.04cvss —epss 0.11

    Directory traversal vulnerability in the OrgChart (com_orgchart) component 1.0.0 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.

  • CVE-2010-1875May 12, 2010
    Joomla
    com_properties
    risk 0.04cvss —epss 0.16

    Directory traversal vulnerability in the Real Estate Property (com_properties) component 3.1.22-03 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php. NOTE: some of…

  • CVE-2010-1858May 7, 2010
    Joomla
    SMEStorage
    risk 0.04cvss —epss 0.14

    Directory traversal vulnerability in the SMEStorage (com_smestorage) component before 1.1 for Joomla! allows remote attackers to read arbitrary files via directory traversal sequences in the controller parameter to index.php.

  • CVE-2010-1722May 4, 2010
    Joomla
    Online Market
    risk 0.04cvss —epss 0.09

    Directory traversal vulnerability in the Online Market (com_market) component 2.x for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php.

  • CVE-2010-1719May 4, 2010
    Joomla
    MT Fire Eagle
    risk 0.04cvss —epss 0.09

    Directory traversal vulnerability in the MT Fire Eagle (com_mtfireeagle) component 1.2 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php.

  • CVE-2010-1718May 4, 2010
    Joomla
    Archery Scores
    risk 0.04cvss —epss 0.09

    Directory traversal vulnerability in archeryscores.php in the Archery Scores (com_archeryscores) component 1.0.6 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the controller parameter to index.php.

  • CVE-2010-1715May 4, 2010
    Joomla
    Online Examination
    risk 0.04cvss —epss 0.08

    Directory traversal vulnerability in the Online Examination (aka Online Exam or com_onlineexam) component 1.5.0 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php. NOTE: some of these details are obtained from…

  • CVE-2010-1714May 4, 2010
    Joomla
    Arcade Games
    risk 0.04cvss —epss 0.19

    Directory traversal vulnerability in the Arcade Games (com_arcadegames) component 1.0 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.

  • CVE-2010-1659May 3, 2010
    Joomla
    Ultimate Portfolio
    risk 0.04cvss —epss 0.14

    Directory traversal vulnerability in the Ultimate Portfolio (com_ultimateportfolio) component 1.0 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.

  • CVE-2010-1653May 3, 2010
    Joomla
    Graphics
    risk 0.04cvss —epss 0.13

    Directory traversal vulnerability in graphics.php in the Graphics (com_graphics) component 1.0.6 and 1.5.0 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the controller parameter to index.php. NOTE: some of these details…

  • CVE-2010-1607Apr 29, 2010
    Joomla
    com_wmi
    risk 0.04cvss —epss 0.08

    Directory traversal vulnerability in wmi.php in the Webmoney Web Merchant Interface (aka WMI or com_wmi) component 1.5.0 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the controller parameter to index.php.

  • CVE-2010-1602Apr 29, 2010
    Joomla
    ZiMB Comment
    risk 0.04cvss —epss 0.16

    Directory traversal vulnerability in the ZiMB Comment (com_zimbcomment) component 0.8.1 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php.

  • CVE-2010-1540Apr 26, 2010
    Joomla
    MyBlog
    risk 0.04cvss —epss 0.08

    Directory traversal vulnerability in index.php in the MyBlog (com_myblog) component 3.0.329 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the task parameter. NOTE: some of these details are obtained from third party information.

  • CVE-2010-1535Apr 26, 2010
    Joomla
    com_travelbook
    risk 0.04cvss —epss 0.15

    Directory traversal vulnerability in the TRAVELbook (com_travelbook) component 1.0.1 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php.

  • CVE-2010-1534Apr 26, 2010
    Joomla
    Shoutbox Pro
    risk 0.04cvss —epss 0.14

    Directory traversal vulnerability in the Shoutbox Pro (com_shoutbox) component for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.

  • CVE-2010-1533Apr 26, 2010
    Joomla
    TweetLA
    risk 0.04cvss —epss 0.15

    Directory traversal vulnerability in the TweetLA (com_tweetla) component 1.0.1 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.

  • CVE-2010-1531Apr 26, 2010
    Joomla
    redSHOP
    risk 0.04cvss —epss 0.17

    Directory traversal vulnerability in the redSHOP (com_redshop) component 1.0.x for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the view parameter to index.php.

  • CVE-2010-1491Apr 23, 2010
    Joomla
    MMS Blog
    risk 0.04cvss —epss 0.14

    Directory traversal vulnerability in the MMS Blog (com_mmsblog) component 2.3.0 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php.

  • CVE-2010-1478Apr 19, 2010
    Joomla
    Jfeedback!
    risk 0.04cvss —epss 0.08

    Directory traversal vulnerability in the Ternaria Informatica Jfeedback! (com_jfeedback) component 1.2 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php.

  • CVE-2010-1476Apr 19, 2010
    Joomla
    AlphaUserPoints
    risk 0.04cvss —epss 0.10

    Directory traversal vulnerability in the AlphaUserPoints (com_alphauserpoints) component 1.5.5 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the view parameter to index.php.

  • CVE-2010-1475Apr 19, 2010
    Joomla
    com_preventive
    risk 0.04cvss —epss 0.09

    Directory traversal vulnerability in the Preventive & Reservation (com_preventive) component 1.0.5 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php.

  • CVE-2010-1474Apr 19, 2010
    Joomla
    com_sweetykeeper
    risk 0.04cvss —epss 0.09

    Directory traversal vulnerability in the Sweety Keeper (com_sweetykeeper) component 1.5.x for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php.

  • CVE-2010-1473Apr 19, 2010
    Joomla
    Advertising (com_advertising)
    risk 0.04cvss —epss 0.08

    Directory traversal vulnerability in the Advertising (com_advertising) component 0.25 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php.

  • CVE-2010-1472Apr 19, 2010
    Joomla
    Daily Horoscope
    risk 0.04cvss —epss 0.13

    Directory traversal vulnerability in the Daily Horoscope (com_horoscope) component 1.5.0 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.

  • CVE-2010-1471Apr 19, 2010
    Joomla
    AddressBook
    risk 0.04cvss —epss 0.16

    Directory traversal vulnerability in the AddressBook (com_addressbook) component 1.5.0 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.

  • CVE-2010-1470Apr 19, 2010
    Joomla
    Web TV
    risk 0.04cvss —epss 0.13

    Directory traversal vulnerability in the Web TV (com_webtv) component 1.0 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php.

  • CVE-2010-1461Apr 16, 2010
    Joomla
    Photo Battle
    risk 0.04cvss —epss 0.08

    Directory traversal vulnerability in the Photo Battle (com_photobattle) component 1.0.1 for Joomla! allows remote attackers to read arbitrary files via the view parameter to index.php.

  • CVE-2010-1354Apr 12, 2010
    Joomla
    com_vjdeo
    risk 0.04cvss —epss 0.16

    Directory traversal vulnerability in the VJDEO (com_vjdeo) component 1.0 and 1.0.1 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php. NOTE: some of these details are obtained from third party information.

  • CVE-2010-1345Apr 9, 2010
    Joomla
    CKForms
    risk 0.04cvss —epss 0.17

    Directory traversal vulnerability in the Cookex Agency CKForms (com_ckforms) component 1.3.3 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.

  • CVE-2010-1314Apr 8, 2010
    Joomla
    Highslide JS
    risk 0.04cvss —epss 0.16

    Directory traversal vulnerability in the Highslide JS (com_hsconfig) component 1.5 and 2.0.9 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php. NOTE: some of these details are obtained from third party…

  • CVE-2010-1313Apr 8, 2010
    Joomla
    Seber Cart
    risk 0.04cvss —epss 0.09

    Directory traversal vulnerability in the Seber Cart (com_sebercart) component 1.0.0.12 and 1.0.0.13 for Joomla!, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the view parameter to index.php. NOTE: some of these details…

  • CVE-2010-1308Apr 8, 2010
    Joomla
    SVMap
    risk 0.04cvss —epss 0.14

    Directory traversal vulnerability in the SVMap (com_svmap) component 1.1.1 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.

  • CVE-2010-1307Apr 8, 2010
    Joomla
    Magic Updater
    risk 0.04cvss —epss 0.10

    Directory traversal vulnerability in the Magic Updater (com_joomlaupdater) component for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.

  • CVE-2010-1217Mar 30, 2010
    Je Form Creator
    Je Form Creator
    risk 0.04cvss —epss 0.06

    Directory traversal vulnerability in the JE Form Creator (com_jeformcr) component for Joomla!, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via directory traversal sequences in the view parameter to index.php. NOTE: the original researcher…

  • CVE-2010-0985Mar 16, 2010
    Joomla
    Abbreviations Manager
    risk 0.04cvss —epss 0.13

    Directory traversal vulnerability in the Abbreviations Manager (com_abbrev) component 1.1 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the controller parameter to index.php. NOTE: some of these details are obtained from…

  • CVE-2010-0972Mar 16, 2010
    Joomla
    com_gcalendar
    risk 0.04cvss —epss 0.13

    Directory traversal vulnerability in the GCalendar (com_gcalendar) component 2.1.5 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the controller parameter to index.php.

  • CVE-2010-0944Mar 8, 2010
    Joomla
    JCollection
    risk 0.04cvss —epss 0.14

    Directory traversal vulnerability in the JCollection (com_jcollection) component for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.

  • CVE-2009-4679Mar 8, 2010
    Joomla
    iF Portfolio Nexus
    risk 0.04cvss —epss 0.08

    Directory traversal vulnerability in the inertialFATE iF Portfolio Nexus (com_if_nexus) component 1.5 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the controller parameter to index.php.

  • CVE-2010-0157Jan 6, 2010
    Joomla
    Com Biblestudy
    risk 0.04cvss —epss 0.13

    Directory traversal vulnerability in the Bible Study (com_biblestudy) component 6.1 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the controller parameter in a studieslist action to index.php.

  • CVE-2009-4202Dec 4, 2009
    Joomla
    Omilen Photo Gallery
    risk 0.04cvss —epss 0.08

    Directory traversal vulnerability in the Omilen Photo Gallery (com_omphotogallery) component Beta 0.5 for Joomla! allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the controller parameter to index.php.

  • CVE-2009-3318Sep 23, 2009
    Joomla
    Album
    risk 0.04cvss —epss 0.06

    Directory traversal vulnerability in the Roland Breedveld Album (com_album) component 1.14 for Joomla! allows remote attackers to access arbitrary directories and have unspecified other impact via a .. (dot dot) in the target parameter to index.php.

  • CVE-2009-2015Jun 9, 2009
    Joomla
    MooFAQ
    risk 0.04cvss —epss 0.07

    Directory traversal vulnerability in includes/file_includer.php in the Ideal MooFAQ (com_moofaq) component 1.0 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.

  • CVE-2008-6482Mar 18, 2009
    Joomla
    Flash Tree Gallery
    risk 0.04cvss —epss 0.16

    PHP remote file inclusion vulnerability in admin.treeg.php in the Flash Tree Gallery (com_treeg) component 1.0 for Joomla!, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via the mosConfig_live_site parameter.

  • CVE-2008-6347Mar 2, 2009
    Joomla
    com_ongumatimesheet20
    risk 0.04cvss —epss 0.15

    PHP remote file inclusion vulnerability in lib/onguma.class.php in the Onguma Time Sheet (com_ongumatimesheet20) 2.0 4b component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.

  • CVE-2008-6222Feb 20, 2009
    Joomla
    Pro Desk Support Center
    risk 0.04cvss —epss 0.12

    Directory traversal vulnerability in the Pro Desk Support Center (com_pro_desk) component 1.0 and 1.2 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the include_file parameter to index.php.

  • CVE-2008-6172Feb 19, 2009
    Joomla
    RWCards (com_rwcards)
    risk 0.04cvss —epss 0.12

    Directory traversal vulnerability in captcha/captcha_image.php in the RWCards (com_rwcards) 3.0.11 component for Joomla!, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the img…

  • CVE-2008-6080Feb 6, 2009
    Joomla
    com_ionfiles
    risk 0.04cvss —epss 0.11

    Directory traversal vulnerability in download.php in the ionFiles (com_ionfiles) 4.4.2 component for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.

  • CVE-2009-0113Jan 9, 2009
    Joomla
    Xstandard
    risk 0.04cvss —epss 0.07

    Directory traversal vulnerability in attachmentlibrary.php in the XStandard component for Joomla! 1.5.8 and earlier allows remote attackers to list arbitrary directories via a .. (dot dot) in the X_CMS_LIBRARY_PATH HTTP header.

  • CVE-2008-5793Dec 31, 2008
    ClickHeat
    ClickHeat
    risk 0.04cvss —epss 0.15

    Multiple PHP remote file inclusion vulnerabilities in the Clickheat - Heatmap stats (com_clickheat) component 1.0.1 for Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the (1) GLOBALS[mosConfig_absolute_path] parameter to (a) install.clickheat.php, (b)…

Page 6 of 22