BIT-JOOMLA-2026-48948 Joomla! Core - [20260702] - Incorrect Access Control in com_contact vcf download

An improper access check allows user to download vcard exports of comcontact contacts that are inaccessible...

[20260702] - Core - Incorrect Access Control in com_contact vcf download

An improper access check allows user to download vcard exports of comcontact contacts that are inaccessible...

CVE-2010-4696

Multiple SQL injection vulnerabilities in Joomla! 1.5.x before 1.5.22 allow remote attackers to execute arbitrary SQL commands via the 1 filterorder or 2 filterorderDir parameter in a comcontact action to index.php, a different vulnerability than CVE-2010-4166. NOTE: the provenance of this...

PT-2019-13940

Name of the Vulnerable Software and Affected Versions Joomla! versions prior to 3.9.11 Description The issue arises from inadequate checks in the com contact component, which could allow mail submission in forms where it has been disabled. Recommendations For versions prior to 3.9.11, update to...

PT-2019-18057

Name of the Vulnerable Software and Affected Versions Joomla! versions prior to 3.9.2 Description The issue is related to inadequate escaping in the com contact component, which leads to a stored XSS vulnerability. Recommendations For versions prior to 3.9.2, update to version 3.9.2 or later to...

Access Control Error Vulnerability in Joomla!

Joomla! is the U.S. Open Source Matters team of a set of PHP and MySQL development using open source , cross-platform content management system CMS. An access control error vulnerability exists in comcontact in Joomla! versions 2.5.0 through 3.8.12, which can be exploited by an attacker to submit...

PT-2018-14231

Name of the Vulnerable Software and Affected Versions Joomla! versions prior to 3.8.13 Description An issue in com contact allows mail submission in disabled forms due to inadequate checks. Recommendations For versions prior to 3.8.13, update to version 3.8.13 or later to resolve the issue...

PT-2011-3908

Name of the Vulnerable Software and Affected Versions Joomla! versions prior to 1.6.4 Description The issue allows remote attackers to inject arbitrary web script or HTML via various components, including 1 the com contact component, as demonstrated by the Itemid parameter to "index.php"; 2 the c...

PT-2011-1651

Name of the Vulnerable Software and Affected Versions Joomla! versions 1.5.x through 1.5.21 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the filter order or filter order Dir parameter in a com contact action to "index.php"...