Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Joomlaboat Clear all filters
TI-2026-63341 CVE-2026-94130 · GHSA-6c54-6qx7-xwjj

SQL injection in joomlaboat.com YouTube Gallery extension for Joomla

Priority MEDIUM 48

Joomla Extension - joomlaboat.com - Unauthenticated SQL injection in YouTube Gallery extension < 5.7.3 - An SQL injection vulnerability in video search functionality and sorting allowed attackers to inject SQL commands i…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00421 Published 2026-09-26 No fix listed CWE-89
TI-2017-14345 CVE-2017-20281 · GHSA-78h7-96vm-7f8g

Joomla! Component Extra Search 2.2.8 SQL Injection

Priority HIGH 77

Joomla! Component Extra Search 2.2.8 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the establename parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00476 Published 2026-06-19 No fix listed CWE-89
TI-2014-04071 CVE-2014-4960 · GHSA-rv28-v9jm-rp9w

Multiple SQL injection vulnerabilities in models\gallery.php in Youtube Gallery…

Priority LOW 37

Multiple SQL injection vulnerabilities in models\gallery.php in Youtube Gallery (com_youtubegallery) component 4.x through 4.1.7, and possibly 3.x, for Joomla! allow remote attackers to execute arbitrary SQL commands via…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02348 Published 2014-07-21 No fix listed CWE-89