Read the docs

Joomla!

Records579All Threatist records
Exploited (KEV)2In CISA KEV
CVSS critical42CVSS 9.0–10.0
CVSS high245CVSS 7.0–8.9

Exploited now

Joomla! records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

4 records in Rs Gallery2 · all components

Priority LOW 37

PHP remote file inclusion vulnerability in rsgallery2.html.php in the RS Gallery2 component (com_rsgallery2) 1.11.2 for Joomla! allows attackers to execute arbitrary PHP code via the mosConfig_absolute_path parameter.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.04303 Published 2007-01-29 No fix listed CWE-94
Open these records in search →