Cmsjunkie

Records9All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high6CVSS 7.0–8.9

Exploited now

Cmsjunkie records in CISA KEV

No Cmsjunkie vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

J-businessdirectory 2 records MEDIUM J-classifiedsmanager 2 records LOW Classifiedsmanager 1 record HIGH J-cruiseportal 1 record MEDIUM Jhotelreservation 1 record HIGH Multiplehotelreservation 1 record HIGH

Records

2 records in J-classifiedsmanager · all components

TI-2015-01338 CVE-2015-1477 · GHSA-5575-w787-j9qq

SQL injection vulnerability in the CMSJunkie J-ClassifiedsManager component for Joomla!…

LOW 37

SQL injection vulnerability in the CMSJunkie J-ClassifiedsManager component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a viewad task to classifieds/offerring-ads.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02397 Published 2015-02-04 No fix listed CWE-89

TI-2015-01339 CVE-2015-1478 · GHSA-wvch-68qf-pf6h

Cross-site scripting (XSS) vulnerability in the CMSJunkie J-ClassifiedsManager component…

LOW 26

Cross-site scripting (XSS) vulnerability in the CMSJunkie J-ClassifiedsManager component for Joomla! allows remote attackers to inject arbitrary web script or HTML via the view parameter to /classifieds.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03217 Published 2015-02-04 No fix listed CWE-79

Open these records in search →

Critical	1
High	6
Medium	2
Low	0
No CVSS	0