Joomla exploits

Joomla! Component JoomCRM 1.1.1 – SQL Injection

Critical

Open

Joomla! Component JoomProject 1.1.3.2 – Information Disclosure

High

Open

Joomla! Component Jimtawl 2.2.7 – ‘id’ SQL Injection

Critical

Open

Joomla! Component AlphaIndex Dictionaries 1.0 – SQL Injection

CVE-2018-17397 · Critical

Open

Joomla! Component Article Factory Manager 4.3.9 – SQL Injection

CVE-2018-17380 · Critical

Open

Joomla! Component Collection Factory 4.1.9 – SQL Injection

CVE-2018-17383 · Critical

Open

Joomla! Component Dutch Auction Factory 2.0.2 – ‘filter_order_Dir’ SQL Injection

Critical

Open

Joomla! Component eXtroForms 2.1.5 – ‘filter_type_id’ SQL Injection

Critical

Open

Joomla! Component Jobs Factory 2.0.4 – SQL Injection

CVE-2018-17382 · Critical

Open

Joomla! Component CW Article Attachments 1.0.6 – ‘id’ SQL Injection

CVE-2018-14592 · Critical

Open

Joomla! Component Auction Factory 4.5.5 – ‘filter_order’ SQL Injection

Critical

Open

Joomla! Component JCK Editor 6.4.4 – ‘parent’ SQL Injection

CVE-2018-17254 · Critical

Open

Joomla! Component Jomres 9.11.2 – Cross-Site Request Forgery (Add User)

High

Open

Joomla! Component Ek Rishta 2.10 – SQL Injection

CVE-2018-12254 · Critical

Open

Joomla! Component EkRishta 2.10 – ‘username’ SQL Injection

Critical

Open

Joomla! Component EkRishta 2.10 – ‘cid’ SQL Injection

Critical

Open

Joomla! Component Full Social 1.1.0 – ‘search_query’ SQL Injection

Critical

Open

Joomla! Component JoomOCShop 1.0 – Cross-Site Request Forgery

High

Open

Joomla! Component EkRishta 2.10 – Cross-Site Scripting / SQL Injection

Critical

Open

Joomla! Component JS Jobs 1.2.0 – Cross-Site Request Forgery

High

Open

Joomla! Component jDownloads 3.2.58 – Cross Site Scripting

CVE-2018-10068 · High

Open

Joomla! Component Acymailing Starter 5.9.5 – CSV Macro Injection

CVE-2018-9107 · High

Open

Joomla! Component AcySMS 3.5.0 – CSV Macro Injection

CVE-2018-9106 · High

Open

Joomla! Component Fields – SQLi Remote Code Execution (Metasploit)

CVE-2017-8917 · Critical

Open

Joomla! Component Alexandria Book Library 3.1.2 – ‘letter’ SQL Injection

CVE-2018-7312 · Critical

Open

Joomla! Component CheckList 1.1.1 – SQL Injection

CVE-2018-7318 · Critical

Open

Joomla! Component CW Tags 2.0.6 – SQL Injection

CVE-2018-7313 · Critical

Open

Joomla! Component Ek Rishta 2.9 – SQL Injection

CVE-2018-7315 · Critical

Open

Joomla! Component ccNewsletter 2.x.x ‘id’ – SQL Injection

CVE-2018-5989 · Critical

Open

Joomla! Component JquickContact 1.3.2.2.1 – SQL Injection

CVE-2018-5983 · Critical

Open

Joomla! Component DT Register 3.2.7 – ‘id’ SQL Injection

CVE-2018-6584 · Critical

Open

Joomla! Component JS Autoz 1.0.9 – SQL Injection

CVE-2018-6006 · Critical

Open

Joomla! Component Fastball 2.5 – ‘season’ SQL Injection

CVE-2018-6373 · Critical

Open

Joomla! Component JS Jobs 1.1.9 – SQL Injection

CVE-2018-5994 · Critical

Open

Joomla! Component File Download Tracker 3.0 – SQL Injection

CVE-2018-6004 · Critical

Open

Joomla! Component Form Maker 3.6.12 – SQL Injection

CVE-2018-5991 · Critical

Open

Joomla! Component Gallery WD 1.3.6 – SQL Injection

CVE-2018-5981 · Critical

Open

Joomla! Component Google Map Landkarten 4.2.3 – SQL Injection

CVE-2018-6396 · Critical

Open

Joomla! Component InviteX 3.0.5 – ‘invite_type’ SQL Injection

CVE-2018-6394 · Critical

Open

Joomla! Component Advertisement Board 3.1.0 – ‘catname’ SQL Injection

CVE-2018-5982 · Critical

Open

Joomla! Component JB Bus 2.3 – ‘order_number’ SQL Injection

CVE-2018-6372 · Critical

Open

Joomla! Component Aist 2.0 – ‘id’ SQL Injection

CVE-2018-5993 · Critical

Open

Joomla! Component jGive 2.0.9 – SQL Injection

CVE-2018-5970 · Critical

Open

Joomla! Component AllVideos Reloaded 1.2.x – ‘divid’ SQL Injection

CVE-2018-5990 · Critical

Open

Joomla! Component JomEstate PRO 3.7 – ‘id’ SQL Injection

CVE-2018-6368 · Critical

Open

Joomla! Component jLike 1.0 – Information Leak

CVE-2018-6610 · High

Open

Joomla! Component JE PayperVideo 3.0.0 – ‘usr_plan’ SQL Injection

CVE-2018-6578 · Critical

Open

Joomla! Component JEXTN Classified 1.0.0 – ‘sid’ SQL Injection

CVE-2018-6575 · Critical

Open

Joomla! Component JEXTN Membership 3.1.0 – ‘usr_plan’ SQL Injection

CVE-2018-6577 · Critical

Open

Joomla! Component JEXTN Reverse Auction 3.1.0 – SQL Injection

CVE-2018-6579 · Critical

Open