Joomla!

Records579All Threatist records

Exploited (KEV)2In CISA KEV

CVSS critical42CVSS 9.0–10.0

CVSS high245CVSS 7.0–8.9

Exploited now

Joomla! records in CISA KEV

TI-2016-08118 PHPMailer Command Injection Vulnerability CRITICAL 100KEV 2025-07-07 TI-2023-09555 Joomla! Improper Access Control Vulnerability HIGH 81KEV 2024-01-08

Components

Products in the NVD configurations · select one to filter the records

Joomla! 340 records CRITICAL Joomla 81 records MEDIUM Bsq Sitestats 6 records LOW Rs Gallery2 4 records LOW Com Beamospetition 3 records LOW Com Weblinks 3 records LOW Com Astatspro 2 records LOW Com Downloads 2 records LOW

Records

6 records in Bsq Sitestats · all components

TI-2006-04813 CVE-2006-4995 · GHSA-vqwv-8xx8-rw3v

PHP remote file inclusion vulnerability in BSQ Sitestats (bsq_sitestats) before 2.1.1 for…

LOW 37

PHP remote file inclusion vulnerability in BSQ Sitestats (bsq_sitestats) before 2.1.1 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01866 Published 2006-09-26 No fix listed

TI-2006-06865 CVE-2006-7124 · GHSA-7mmh-mpmr-2vj6

PHP remote file inclusion vulnerability in external/rssfeeds.php in BSQ Sitestats…

LOW 36

PHP remote file inclusion vulnerability in external/rssfeeds.php in BSQ Sitestats (component for Joomla) 1.8.0, and possibly other versions before 2.2.1, allows remote attackers to execute arbitrary PHP code via the base…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0172 Published 2007-03-06 No fix listed

TI-2006-06864 CVE-2006-7123 · GHSA-w86x-rm2j-383p

Multiple SQL injection vulnerabilities in BSQ Sitestats (component for Joomla) 1.8.0, and…

LOW 35

Multiple SQL injection vulnerabilities in BSQ Sitestats (component for Joomla) 1.8.0, and possibly other versions before 2.2.1, allow remote attackers to execute arbitrary SQL commands via (1) unspecified parameters when…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01152 Published 2007-03-06 No fix listed

TI-2006-06867 CVE-2006-7126 · GHSA-f5q4-jqjv-rhr8

SQL injection vulnerability in Joomla BSQ Sitestats 1.8.0 and 2.2.1 allows remote…

LOW 33

SQL injection vulnerability in Joomla BSQ Sitestats 1.8.0 and 2.2.1 allows remote attackers to execute arbitrary SQL commands via the query string, possibly PHP_SELF.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.0122 Published 2007-03-06 No fix listed

TI-2006-06866 CVE-2006-7125 · GHSA-36ww-x63p-687w

Cross-site scripting (XSS) vulnerability in Joomla BSQ Sitestats 1.8.0 and 2.2.1 allows…

LOW 33

Cross-site scripting (XSS) vulnerability in Joomla BSQ Sitestats 1.8.0 and 2.2.1 allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer header, which is not properly handled when the administ…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01242 Published 2007-03-06 No fix listed

TI-2006-06863 CVE-2006-7122 · GHSA-g3qx-2527-xc65

Cross-site scripting (XSS) vulnerability in the IP Address Lookup functionality in BSQ…

LOW 33

Cross-site scripting (XSS) vulnerability in the IP Address Lookup functionality in BSQ Sitestats (component for Joomla) 1.8.0, and possibly other versions before 2.2.1, allows remote attackers to inject arbitrary web scr…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01242 Published 2007-03-06 No fix listed

Open these records in search →

Critical	42
High	245
Medium	288
Low	4
No CVSS	0