Vulnerabilities in Joomla!
10 resultsCVE-2011-4908—TinyBrowser plugin for Joomla! before 1.5.13 allows arbitrary file upload via upload.php.EPSS 55.8%CVE-2011-4906—Tiny browser in TinyMCE 3.0 editor in Joomla! before 1.5.13 allows file upload and arbitrary PHP code execution.EPSS 9.6%CVE-2012-1563—Joomla! before 2.5.3 allows Admin Account Creation.EPSS 8.9%CVE-2011-1151—Joomla! 1.6.0 is vulnerable to SQL Injection via the filter_order and filer_order_Dir parameters.EPSS 1.7%CVE-2011-4937—Joomla! 1.7.1 has core information disclosure due to inadequate error checking.EPSS 1.6%CVE-2011-3629—Joomla! core 1.7.1 allows information disclosure due to weak encryptionEPSS 1.1%CVE-2012-1562—Joomla! core before 2.5.3 allows unauthorized password change.EPSS 0.9%CVE-2011-4907—Joomla! 1.5x through 1.5.12: Missing JEXEC CheckEPSS 0.9%CVE-2011-3595—Multiple Cross-site Scripting (XSS) vulnerabilities exist in Joomla! through 1.7.0 in index.php in the search word, extension, asset, and auEPSS 0.8%CVE-2011-4912—Joomla! com_mailto 1.5.x through 1.5.13 has an automated mail timeout bypass.EPSS 0.8%