Where
AND
AND
-Infinity
0

Trending

Last week
Last month
Last year

Joomla XStandardPath Traversal

Risk 26
Severity
5
Path Traversal
AV:N/AC:L/Au:N/C:P/I:N/A:N

Directory traversal vulnerability in attachmentlibrary.php in the XStandard component for Joomla! 1.5.8 and earlier allows remote attackers to list arbitrary directories via a .. (dot dot) in the XCMSLIBRARYPATH HTTP header.

First published (updated )
CVE-2009-0113

Joomla joomlaMultiple unspecified vulnerabilities in Joomla! before 1.0.12 have unknown impact and attack vectors…

Risk 47
Severity
6.8
AV:N/AC:M/Au:N/C:P/I:P/A:P

Multiple unspecified vulnerabilities in Joomla! before 1.0.12 have unknown impact and attack vectors related to (1) "unneeded legacy functions" and (2) "Several low level security fixes."

First published (updated )
CVE-2006-6834

Joomla joomlaXSS

Risk 22
Severity
4.3
XSS
AV:N/AC:M/Au:N/C:N/I:P/A:N

Cross-site scripting (XSS) vulnerability in Joomla! before 1.0.12 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly related to poll.php or the module title.

First published (updated )
CVE-2006-6832

Joomla joomlaUnspecified vulnerability in com_content in Joomla! before 1.0.11, when $mosConfig_hideEmail is set,…

Risk 37
Severity
5.1
AV:N/AC:H/Au:N/C:P/I:P/A:P

Unspecified vulnerability in comcontent in Joomla! before 1.0.11, when $mosConfighideEmail is set, allows attackers to perform the emailform and emailsend tasks.

First published (updated )
CVE-2006-4473

Joomla joomlaXSS

Risk 47
Severity
6.8
XSS
AV:N/AC:M/Au:N/C:P/I:P/A:P

Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.0.11 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters in (1) Admin Module Manager, (2) Admin Help, and (3) Search.

First published (updated )
CVE-2006-4474

Joomla joomlaInput Validation

Risk 26
Severity
5
Input Validation
AV:N/AC:L/Au:N/C:N/I:P/A:N

Joomla! before 1.0.11 does not properly unset variables when the input data includes a numeric parameter with a value matching an alphanumeric parameter's hash value, which allows remote attackers to have an unspecified impact. NOTE: it could be argued that this vulnerability is due to a bug in the unset PHP command (CVE-2006-3017) and the proper fix should be in PHP; if so, then this should not be treated as a vulnerability in Joomla!.

First published (updated )
CVE-2006-4466

Joomla joomlaXSS

Risk 35
Severity
5.8
XSS
AV:N/AC:M/Au:N/C:P/I:P/A:N

Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.0.10 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters involving the (1) getUserStateFromRequest function, and the (2) SEF and (3) commessages modules.

First published (updated )
CVE-2006-3480

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203