Vulnerabilities

TI-2026-36168 CVE-2026-48908 · GHSA-8fwr-8fxr-8v2p

Joomla Extension - joomshaper.com - Remote Code Execution in SP Pagebuilder extension for Joomla < 6.6.2

CRITICAL 100KEV

A vulnerability in SP Page Builder for Joomla allows unauthenticated users to upload arbitrary files, ultimately resulting in the upload and execution of PHP code.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.89176 Published 2026-06-20 No fix listed CWE-434

TI-2017-14330 CVE-2017-20266 · GHSA-hccq-j8pc-rxf8

Joomla SP Movie Database 1.3 SQL Injection via searchword

HIGH 77

Joomla SP Movie Database 1.3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the searchword parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00413 Published 2026-06-19 No fix listed CWE-89

Vulnerabilities

Filters

Joomla Extension - joomshaper.com - Remote Code Execution in SP Pagebuilder extension for Joomla < 6.6.2

Joomla SP Movie Database 1.3 SQL Injection via searchword