Read the docs

Joomlaboat

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Joomlaboat records in CISA KEV

No Joomlaboat vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Com Youtubegallery 2 records LOW Extra Search 1 record HIGH Youtube Gallery 1 record MEDIUM

Records

4 records

TI-2017-14345 CVE-2017-20281 · GHSA-78h7-96vm-7f8g

Joomla! Component Extra Search 2.2.8 SQL Injection

Priority HIGH 77

Joomla! Component Extra Search 2.2.8 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the establename parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00476 Published 2026-06-19 No fix listed CWE-89
TI-2026-63341 CVE-2026-94130 · GHSA-6c54-6qx7-xwjj

SQL injection in joomlaboat.com YouTube Gallery extension for Joomla

Priority MEDIUM 48

Joomla Extension - joomlaboat.com - Unauthenticated SQL injection in YouTube Gallery extension < 5.7.3 - An SQL injection vulnerability in video search functionality and sorting allowed attackers to inject SQL commands i…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00421 Published 2026-09-26 No fix listed CWE-89
TI-2014-04071 CVE-2014-4960 · GHSA-rv28-v9jm-rp9w

Multiple SQL injection vulnerabilities in models\gallery.php in Youtube Gallery…

Priority LOW 37

Multiple SQL injection vulnerabilities in models\gallery.php in Youtube Gallery (com_youtubegallery) component 4.x through 4.1.7, and possibly 3.x, for Joomla! allow remote attackers to execute arbitrary SQL commands via…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02348 Published 2014-07-21 No fix listed CWE-89
Open these records in search →