Vulnerabilities

TI-2022-07824 CVE-2022-23802 · GHSA-8gpg-jrjq-xx4m

Extension - Insecure Permissions within Joomla Guru extensions

LOW 35

Joomla Guru extension 5.2.5 is affected by: Insecure Permissions.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01167 Published 2022-05-06 No fix listed CWE-276

TI-2018-04107 CVE-2018-5696 · GHSA-p9j3-wcr9-5g82

The iJoomla com_adagency plugin 6.0.9 for Joomla! allows SQL injection via the…

MEDIUM 45

The iJoomla com_adagency plugin 6.0.9 for Joomla! allows SQL injection via the `advertiser_status` and `status_select` parameters to index.php.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01456 Published 2018-01-14 No fix listed CWE-89

TI-2010-04641 CVE-2010-4918 · GHSA-xj3f-76hf-wv75

PHP remote file inclusion vulnerability in iJoomla Magazine (com_magazine) component…

LOW 37

PHP remote file inclusion vulnerability in iJoomla Magazine (com_magazine) component 3.0.1 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the config parameter to magazine.functions.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02338 Published 2011-10-08 No fix listed CWE-94

TI-2010-01267 CVE-2010-1312 · GHSA-mj8r-pwcx-74cf

Directory traversal vulnerability in the iJoomla News Portal (com_news_portal) component…

LOW 38

Directory traversal vulnerability in the iJoomla News Portal (com_news_portal) component 1.5.x for Joomla! allows remote attackers to read arbitrary files via a ..

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.13621 Published 2010-04-08 No fix listed CWE-22

TI-2009-02006 CVE-2009-2099 · GHSA-mxvw-6j8c-q2m2

SQL injection vulnerability in the iJoomla RSS Feeder (com_ijoomla_rss) component for…