Kunena

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Kunena records in CISA KEV

No Kunena vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Kunena 6 records MEDIUM Kunena Forum 1 record LOW

Records

6 records in Kunena · all components

TI-2016-09057 CVE-2016-11020 · GHSA-gffh-9h9q-xv2h

Kunena before 5.0.4 does not restrict avatar file extensions to gif, jpeg, jpg, and png.

MEDIUM 47

Kunena before 5.0.4 does not restrict avatar file extensions to gif, jpeg, jpg, and png.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02884 Published 2020-02-24 No fix listed CWE-434

TI-2012-04112 CVE-2012-4868 · GHSA-4hq4-8jjj-9p26

SQL injection vulnerability in news.php in the Kunena component 1.7.2 for Joomla! allows…

LOW 35

SQL injection vulnerability in news.php in the Kunena component 1.7.2 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01199 Published 2012-09-06 No fix listed CWE-89

TI-2014-07395 CVE-2014-9102 · GHSA-wfr9-xqjv-8w45

Multiple SQL injection vulnerabilities in the Kunena component before 3.0.6 for Joomla!…

LOW 32

Multiple SQL injection vulnerabilities in the Kunena component before 3.0.6 for Joomla! allow remote authenticated users to execute arbitrary SQL commands via the index value in an array parameter, as demonstrated by the…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.01658 Published 2014-11-26 No fix listed CWE-89

TI-2017-03673 CVE-2017-5673 · GHSA-ff32-69mc-6jwx

In the Kunena extension 5.0.2 through 5.0.4 for Joomla!, the forum message subject (aka…

LOW 28

In the Kunena extension 5.0.2 through 5.0.4 for Joomla!, the forum message subject (aka topic subject) accepts JavaScript, leading to XSS.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00693 Published 2017-03-22 No fix listed CWE-79

TI-2019-11291 CVE-2019-15120 · GHSA-3m5j-r9wr-wr68

The Kunena extension before 5.1.14 for Joomla! allows XSS via BBCode.

LOW 27

The Kunena extension before 5.1.14 for Joomla! allows XSS via BBCode.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01355 Published 2019-08-16 No fix listed CWE-79

TI-2014-07396 CVE-2014-9103 · GHSA-vhxx-2mfr-ffpp

Multiple cross-site scripting (XSS) vulnerabilities in the Kunena component before 3.0.6…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in the Kunena component before 3.0.6 for Joomla! allow remote attackers to inject arbitrary web script or HTML via the (1) index value of an array parameter or the file…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01885 Published 2014-11-26 No fix listed CWE-79

Open these records in search →

Critical	1
High	2
Medium	4
Low	0
No CVSS	0