Joobi

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Joobi records in CISA KEV

No Joobi vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Jnews 3 records MEDIUM Com Jnews 2 records LOW Acajoom 1 record LOW Com Jstore 1 record MEDIUM

Records

7 records

TI-2010-04984 CVE-2010-5286 · GHSA-q5xj-3wxr-5xw3

Directory traversal vulnerability in Jstore (com_jstore) component for Joomla! allows…

MEDIUM 57

Directory traversal vulnerability in Jstore (com_jstore) component for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a ..

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.12142 Published 2012-11-26 No fix listed CWE-22

TI-2015-06105 CVE-2015-7341 · GHSA-q3vp-f397-99rf

JNews Joomla Component before 8.5.0 allows arbitrary File Upload via Subscribers or…

MEDIUM 40

JNews Joomla Component before 8.5.0 allows arbitrary File Upload via Subscribers or Templates, as demonstrated by the .php5 extension.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01127 Published 2020-03-09 No fix listed CWE-434

TI-2008-01370 CVE-2008-1427 · GHSA-6xcf-x2jw-6fxr

SQL injection vulnerability in the Joobi Acajoom (com_acajoom) 1.1.5 and 1.2.5 component…

LOW 37

SQL injection vulnerability in the Joobi Acajoom (com_acajoom) 1.1.5 and 1.2.5 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the mailingid parameter in a mailing view action to index…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02079 Published 2008-03-20 No fix listed CWE-89

TI-2015-06106 CVE-2015-7342 · GHSA-f7h6-pm8g-v4c4

JNews Joomla Component before 8.5.0 allows SQL injection via upload thumbnail, Queue…

LOW 34

JNews Joomla Component before 8.5.0 allows SQL injection via upload thumbnail, Queue Search Field, Subscribers Search Field, or Newsletters Search Field.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00982 Published 2020-03-09 No fix listed CWE-89

TI-2013-01438 CVE-2013-1636 · GHSA-j6f8-7w49-7g29

Cross-site scripting (XSS) vulnerability in open-flash-chart.swf in Open Flash Chart (aka…

LOW 29

Cross-site scripting (XSS) vulnerability in open-flash-chart.swf in Open Flash Chart (aka Open-Flash Chart), as used in the Pretty Link Lite plugin before 1.6.3 for WordPress, JNews (com_jnews) component 8.0.1 for Joomla…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.06314 Published 2014-03-12 No fix listed CWE-79

TI-2012-03636 CVE-2012-4256 · GHSA-vcp7-xxjg-2gwg

The jNews (com_jnews) component 7.5.1 for Joomla! allows remote attackers to obtain…

LOW 26

The jNews (com_jnews) component 7.5.1 for Joomla! allows remote attackers to obtain sensitive information via the emailsearch parameter, which reveals the installation path in an error message.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.0148 Published 2012-08-13 No fix listed CWE-200

TI-2015-06107 CVE-2015-7343 · GHSA-xrg5-3www-67qf

JNews Joomla Component before 8.5.0 has XSS via the mailingsearch parameter.

LOW 23

JNews Joomla Component before 8.5.0 has XSS via the mailingsearch parameter.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00539 Published 2020-03-09 No fix listed CWE-79

Open these records in search →

Critical	1
High	3
Medium	3
Low	0
No CVSS	0