National Vulnerability Database

National Vulnerability Database

National Vulnerability
Database

Search Results (Refine Search)

Search Parameters:
  • Results Type: Overview
  • Keyword (text search): Joomla
  • Search Type: Search All
There are 1,042 matching records.
Displaying matches 981 through 1000.
Vuln ID Summary CVSS Severity
CVE-2006-5041

Unspecified vulnerability in Hot Properties (possibly com_hotproperties) 0.97 and earlier for Joomla! has unspecified impact and attack vectors.

Published: September 27, 2006; 07:07:00 PM -04:00
V2: 7.5 HIGH
CVE-2006-5042

Unspecified vulnerability in mosMedia (com_mosmedia) 1.0.8 and earlier for Joomla! has unspecified impact and attack vectors.

Published: September 27, 2006; 07:07:00 PM -04:00
V2: 7.5 HIGH
CVE-2006-5043

Multiple PHP remote file inclusion vulnerabilities in the Joomlaboard Forum Component (com_joomlaboard) before 1.1.2 for Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the sbp parameter to (1) file_upload.php or (2) image_upload.php, a variant of CVE-2006-3528.

Published: September 27, 2006; 07:07:00 PM -04:00
V2: 6.8 MEDIUM
CVE-2006-5044

Unspecified vulnerability in Prince Clan (Princeclan) Chess component (com_pcchess) 0.8 and earlier for Mambo and Joomla! has unspecified impact and attack vectors.

Published: September 27, 2006; 07:07:00 PM -04:00
V2: 7.5 HIGH
CVE-2006-5045

Unspecified vulnerability in PollXT component (com_pollxt) 1.22.07 and earlier for Joomla! has unspecified impact and attack vectors, probably related to PHP remote file inclusion in the mosConfig_absolute_path to conf.pollxt.php.

Published: September 27, 2006; 07:07:00 PM -04:00
V2: 6.8 MEDIUM
CVE-2006-5046

Unspecified vulnerability in RS Gallery2 (com_rsgallery2) 1.11.3 and earlier for Joomla! has unspecified impact and attack vectors, related to lack of "hardened language files."

Published: September 27, 2006; 07:07:00 PM -04:00
V2: 7.5 HIGH
CVE-2006-5047

Unspecified vulnerability in rsgallery2.html.php in RS Gallery2 component (com_rsgallery2) before 1.11.3 for Joomla! allows attackers to execute arbitrary code.

Published: September 27, 2006; 07:07:00 PM -04:00
V2: 7.5 HIGH
CVE-2006-5048

Multiple PHP remote file inclusion vulnerabilities in Security Images (com_securityimages) component 3.0.5 and earlier for Joomla! allow remote attackers to execute arbitrary code via a URL in the mosConfig_absolute_path parameter in (1) configinsert.php, (2) lang.php, (3) client.php, and (4) server.php.

Published: September 27, 2006; 07:07:00 PM -04:00
V2: 6.8 MEDIUM
CVE-2006-5049

Unspecified vulnerability in Classifieds (com_classifieds) component 1.3 and earlier for Joomla! has unspecified impact and attack vectors.

Published: September 27, 2006; 07:07:00 PM -04:00
V2: 7.5 HIGH
CVE-2006-4992

Multiple PHP remote file inclusion vulnerabilities in JD-WordPress for Joomla! (com_jd-wp) 2.0-1.0 RC2 allow remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter in (1) wp-comments-post.php, (2) wp-feed.php, or (3) wp-trackback.php.

Published: September 25, 2006; 10:07:00 PM -04:00
V2: 7.5 HIGH
CVE-2006-4995

PHP remote file inclusion vulnerability in BSQ Sitestats (bsq_sitestats) before 2.1.1 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.

Published: September 25, 2006; 10:07:00 PM -04:00
V2: 7.5 HIGH
CVE-2006-4996

Unspecified vulnerability in JoomlaLib (com_joomlalib) before 1.2.2 for Joomla! allows remote attackers to have an unknown impact, related to "Joomla globals hacked by script kiddies."

Published: September 25, 2006; 10:07:00 PM -04:00
V2: 10.0 HIGH
CVE-2006-4553

PHP remote file inclusion vulnerability in plugin.class.php in the com_comprofiler Components 1.0 RC2 for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.

Published: September 05, 2006; 08:04:00 PM -04:00
V2: 6.8 MEDIUM
CVE-2006-4556

** DISPUTED ** PHP remote file inclusion vulnerability in index.php in the JIM component for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. NOTE: another researcher has stated that the product distribution does not include an index.php file. Also, this might be related to CVE-2006-4242.

Published: September 05, 2006; 08:04:00 PM -04:00
V2: 7.5 HIGH
CVE-2006-4466

Joomla! before 1.0.11 does not properly unset variables when the input data includes a numeric parameter with a value matching an alphanumeric parameter's hash value, which allows remote attackers to have an unspecified impact. NOTE: it could be argued that this vulnerability is due to a bug in the unset PHP command (CVE-2006-3017) and the proper fix should be in PHP; if so, then this should not be treated as a vulnerability in Joomla!.

Published: August 31, 2006; 04:04:00 PM -04:00
V2: 5.0 MEDIUM
CVE-2006-4468

Multiple unspecified vulnerabilities in Joomla! before 1.0.11, related to unvalidated input, allow attackers to have an unknown impact via unspecified vectors involving the (1) mosMail, (2) JosIsValidEmail, and (3) josSpoofValue functions; (4) the lack of inclusion of globals.php in administrator/index.php; (5) the Admin User Manager; and (6) the poll module.

Published: August 31, 2006; 04:04:00 PM -04:00
V2: 6.8 MEDIUM
CVE-2006-4469

Unspecified vulnerability in PEAR.php in Joomla! before 1.0.11 allows remote attackers to perform "remote execution," related to "Injection Flaws."

Published: August 31, 2006; 04:04:00 PM -04:00
V2: 7.5 HIGH
CVE-2006-4470

Joomla! before 1.0.11 omits some checks for whether _VALID_MOS is defined, which allows attackers to have an unknown impact, possibly resulting in PHP remote file inclusion.

Published: August 31, 2006; 04:04:00 PM -04:00
V2: 7.5 HIGH
CVE-2006-4471

The Admin Upload Image functionality in Joomla! before 1.0.11 allows remote authenticated users to upload files outside of the /images/stories/ directory via unspecified vectors.

Published: August 31, 2006; 04:04:00 PM -04:00
V2: 6.5 MEDIUM
CVE-2006-4472

Multiple unspecified vulnerabilities in Joomla! before 1.0.11 allow attackers to bypass user authentication via unknown vectors involving the (1) do_pdf command and the (2) emailform com_content task.

Published: August 31, 2006; 04:04:00 PM -04:00
V2: 7.5 HIGH