Joomlashack

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Joomlashack records in CISA KEV

No Joomlashack vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Osdownloads 1 record HIGH Shack Forms Pro 1 record MEDIUM

Records

2 records

TI-2017-14323 CVE-2017-20259 · GHSA-mgg5-26h7-f8pw

Joomla OSDownloads 1.7.4 SQL Injection via item view

HIGH 77

Joomla OSDownloads 1.7.4 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the id parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00413 Published 2026-06-19 No fix listed CWE-89

TI-2019-12994 CVE-2019-17399 · GHSA-g688-fqj8-mmw7

The Shack Forms Pro extension before 4.0.32 for Joomla! allows path traversal via a file attachment.

MEDIUM 45

The Shack Forms Pro extension before 4.0.32 for Joomla! allows path traversal via a file attachment.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01701 Published 2019-10-09 No fix listed CWE-22

Open these records in search →

Critical	1
High	1
Medium	0
Low	0
No CVSS	0