JOIN TELEGRAM CHANNEL
Joomla Exploits
DATABASE
Joomla JLex Review 6.0.1 – Reflected XSS
php VIEW
Joomla iProperty Real Estate 4.1.1 – Reflected XSS
php VIEW
Joomla Solidres 2.13.3 – Reflected XSS
php VIEW
Joomla HikaShop 4.7.4 – Reflected XSS
php VIEW
Joomla VirtueMart Shopping Cart 4.0.12 – Reflected XSS
php VIEW
Joomla! com_booking component 2.4.9 – Information Leak (Account enumeration)
php VIEW
Joomla! v4.2.8 – Unauthenticated information disclosure
CVE-2023-23752 php VIEW
Joomla Plugin SexyPolling 2.1.7 – SQLi
php VIEW
Balbooa Joomla Forms Builder 2.0.6 – SQL Injection (Unauthenticated)
php VIEW
Joomla JCK Editor 6.4.4 – ‘parent’ SQL Injection (2)
CVE-2018-17254 php VIEW
Joomla! Component GMapFP 3.5 – Unauthenticated Arbitrary File Upload
CVE-2020-23972 php VIEW
Joomla Plugin Simple Image Gallery Extended (SIGE) 3.5.3 – Multiple Vulnerabilities
php VIEW
Joomla! paGO Commerce 2.5.9.0 – SQL Injection (Authenticated)
php VIEW
Joomla! J2 JOBS 1.3.0 – ‘sortby’ Authenticated SQL Injection
php VIEW
Joomla! J2 Store 3.3.11 – ‘filter_order_Dir’ Authenticated SQL Injection
php VIEW
Joomla! Plugin XCloner Backup 3.5.3 – Local File Inclusion (Authenticated)
php VIEW
Joomla! com_fabrik 3.9.11 – Directory Traversal
php VIEW
Joomla! Component GMapFP 3.30 – Arbitrary File Upload
php VIEW
Joomla! com_hdwplayer 4.2 – ‘search.php’ SQL Injection
php VIEW
Joomla! Component ACYMAILING 3.9.0 – Unauthenticated Arbitrary File Upload
php VIEW
Joomla! Component com_newsfeeds 1.0 – ‘feedid’ SQL Injection
php VIEW
Joomla! 3.9.0 < 3.9.7 - CSV Injection
CVE-2019-12765 php VIEW
Joomla! 3.4.6 – Remote Code Execution (Metasploit)
php VIEW
Joomla! 3.4.6 – Remote Code Execution
php VIEW
Joomla! 3.4.6 – ‘configuration.php’ Remote Code Execution
php VIEW
Joomla! component com_jsjobs 1.2.6 – Arbitrary File Deletion
php VIEW
Joomla! Component JS Jobs (com_jsjobs) 1.2.5 – ‘customfields.php’ SQL Injection
php VIEW
Joomla! Component JS Jobs (com_jsjobs) 1.2.5 – ‘cities.php’ SQL Injection
php VIEW
Joomla! Component JS Support Ticket (com_jssupportticket) 1.1.6 – ‘ticket.php’ Arbitrary File Deletion
php VIEW
Joomla! Component JS Support Ticket (com_jssupportticket) 1.1.6 – ‘ticketreply.php’ SQL Injection
php VIEW
Joomla! Component JS Support Ticket (component com_jssupportticket) 1.1.5 – Arbitrary File Download
php VIEW
Joomla! Component JS Support Ticket (component com_jssupportticket) 1.1.5 – SQL Injection
php VIEW
Joomla! Component JiFile 2.3.1 – Arbitrary File Download
php VIEW
Joomla! Component ARI Quiz 3.7.4 – SQL Injection
php VIEW
Joomla! Core 1.5.0 – 3.9.4 – Directory Traversal / Authenticated Arbitrary File Deletion
CVE-2019-10945 php VIEW
Joomla! Component J2Store < 3.3.7 - SQL Injection
CVE-2019-9184 php VIEW
Joomla! Component J-CruisePortal 6.0.4 – SQL Injection
php VIEW
Joomla! Component JHotelReservation 6.0.7 – SQL Injection
php VIEW
Joomla! Component vBizz 1.0.7 – SQL Injection
php VIEW
Joomla! Component VMap 1.9.6 – SQL Injection
php VIEW
Joomla! Component vRestaurant 1.9.4 – SQL Injection
php VIEW
Joomla! Component vReview 1.9.11 – SQL Injection
php VIEW
Joomla! Component vWishlist 1.0.1 – SQL Injection
php VIEW
Joomla! Component J-BusinessDirectory 4.9.7 – ‘type’ SQL Injection
php VIEW
Joomla! Component J-ClassifiedsManager 3.0.5 – SQL Injection
php VIEW
Joomla! Component JMultipleHotelReservation 6.0.7 – SQL Injection
php VIEW
Joomla! Component vAccount 2.0.2 – ‘vid’ SQL Injection
php VIEW
Joomla! Component vBizz 1.0.7 – Remote Code Execution
php VIEW
Joomla! Component Easy Shop 1.2.3 – Local File Inclusion
php VIEW
Joomla! Core 3.9.1 – Persistent Cross-Site Scripting in Global Configuration Textfilter Settings
CVE-2019-6263 php VIEW
123