Skip to content

Product

joomla/framework vulnerabilities

3 published CVES affecting joomla/framework, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
3
Critical
0
High
2
Medium
1
Low
0
Unscored
0
CISA KEV
0

Latest joomla/framework CVEs

Newest publication first

  1. CVE-2018-17856 Joomla RCE Vulnerability

    Published
    HighCVSS 7.2 EPSS 2.7%

    An issue was discovered in Joomla! before 3.8.13. com_joomlaupdate allows the execution of arbitrary code. The default ACL config enabled the ability of Administrator-level users to access com_joomlaupdate and trigger code execution.

  2. CVE-2008-4104 Joomla! Open Redirect vulnerability

    Published
    MediumCVSS 5.8 EPSS 1.4%

    Multiple open redirect vulnerabilities in Joomla! 1.5 before 1.5.7 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a "passed in" URL.

  3. CVE-2008-3227 Joomla! Open Redirect vulnerability

    Published
    HighCVSS 7.5 EPSS 1.1%

    Unspecified vulnerability in Joomla! before 1.5.4 has unknown impact and attack vectors related to a "User Redirect Spam fix," possibly an open redirect vulnerability.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.