Lucene search
+L

18500 matches found

EUVD
EUVD
added 1 hour ago5 views

EUVD-2026-54478

Joomla Extension - joomshaper.com - Unauthenticated stored XSS in Shapes API endpoint SP Page Builder 6.7.0 - An unauthenticated attacker can store malicious JavaScript in a Joomla site's database via a single HTTP request. When an administrator opens the SP Page Builder editor, the JavaScript...

8.7CVSS5.2AI score
SaveExploits0References2
NVD
NVD
added 3 hours ago5 views

CVE-2026-66494

Joomla Extension - joomshaper.com - Unauthenticated stored XSS in Shapes API endpoint SP Page Builder 6.7.0 - An unauthenticated attacker can store malicious JavaScript in a Joomla site's database via a single HTTP request. When an administrator opens the SP Page Builder editor, the JavaScript...

8.7CVSS
SaveExploits0References1
CVE
CVE
added 3 hours ago14 views

CVE-2026-66914

CVE-2026-66914 concerns the Joomla extension SEBLOD. Affected versions are SEBLOD < 3.30.0, < 4.7.0, and

9.2CVSS5.2AI score
SaveExploits0References1
Cvelist
Cvelist
added 3 hours ago10 views

CVE-2026-66494 Joomla Extension - joomshaper.com - Unauthenticated stored XSS in Shapes API endpoint SP Page Builder < 6.7.0

Joomla Extension - joomshaper.com - Unauthenticated stored XSS in Shapes API endpoint SP Page Builder 6.7.0 - An unauthenticated attacker can store malicious JavaScript in a Joomla site's database via a single HTTP request. When an administrator opens the SP Page Builder editor, the JavaScript...

8.7CVSS
SaveExploits0References1
NVD
NVD
added 7 hours ago6 views

CVE-2026-66493

Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.3 - Improper limitation of paths for delete, copy and move actions lead to path traversal vulnerabilities...

6.4CVSS
SaveExploits0References1
NVD
NVD
added 7 hours ago7 views

CVE-2026-66491

Joomla Extension - phoca.cz - Arbitrary File Read in Phoca Commander 1.0.0-6.1.3 - Improper limitation of paths in the getSource function lead to an arbitrary file read vulnerability...

8.2CVSS
SaveExploits0References1
Cvelist
Cvelist
added 8 hours ago7 views

CVE-2026-66491 Joomla Extension - phoca.cz - Arbitrary File Read in Phoca Commander 1.0.0-6.1.3

Joomla Extension - phoca.cz - Arbitrary File Read in Phoca Commander 1.0.0-6.1.3 - Improper limitation of paths in the getSource function lead to an arbitrary file read vulnerability...

8.2CVSS
SaveExploits0References1
EUVD
EUVD
added 8 hours ago5 views

EUVD-2026-54412

Joomla Extension - phoca.cz - Arbitrary File Read in Phoca Commander 1.0.0-6.1.3 - Improper limitation of paths in the getSource function lead to an arbitrary file read vulnerability...

8.2CVSS5.4AI score
SaveExploits0References1
CVE
CVE
added 8 hours ago13 views

CVE-2026-66491

CVE-2026-66491 affects the Joomla extension phoca.cz Phoca Commander (versions 1.0.0–6.1.3). The issue is an improper limitation of paths in the getSource function, enabling an arbitrary file read. The CVSS v4 metrics indicate a high severity (8.2) with network attack vector, low attack complexit...

8.2CVSS5.4AI score
SaveExploits0References1
Cvelist
Cvelist
added 8 hours ago6 views

CVE-2026-66492 Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.3

Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.3 - Improper limitation of paths in the file upload action lead to path a traversal vulnerability...

6.1CVSS
SaveExploits0References1
CVE
CVE
added 8 hours ago12 views

CVE-2026-66492

Phoca Commander (Joomla extension by phoca.cz) versions 1.0.0-6.1.3 expose a path traversal vulnerability in the file upload action, caused by improper limitation/validation of upload paths. This results in a path traversal flaw within the module. The connected documents confirm the affected prod...

6.1CVSS5.2AI score
SaveExploits0References1
EUVD
EUVD
added 8 hours ago5 views

EUVD-2026-54411

Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.3 - Improper limitation of paths in the file upload action lead to path a traversal vulnerability...

6.1CVSS5.2AI score
SaveExploits0References1
CVE
CVE
added 8 hours ago11 views

CVE-2026-66493

CVE-2026-66493 affects the Joomla extension Phoca Commander (phoca.cz) versions 1.0.0 through 6.1.3. The issue is a path traversal vulnerability caused by improper limitation of paths for delete, copy, and move actions. The CVSS data indicates NETWORK access with low complexity and high privilege...

6.4CVSS5.2AI score
SaveExploits0References1
EUVD
EUVD
added 8 hours ago4 views

EUVD-2026-54409

Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.3 - Improper limitation of paths for delete, copy and move actions lead to path traversal vulnerabilities...

6.4CVSS5.2AI score
SaveExploits0References1
Cvelist
Cvelist
added 8 hours ago6 views

CVE-2026-66493 Joomla Extension - phoca.cz - Path traversal vulnerability in Phoca Commander 1.0.0-6.1.3

Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.3 - Improper limitation of paths for delete, copy and move actions lead to path traversal vulnerabilities...

6.4CVSS
SaveExploits0References1
Nuclei
Nuclei
added 12 hours ago5 views

Joomla iCagenda < 3.9.10 - Unauthenticated Arbitrary File Upload RCE

iCagenda extension for Joomla contains an unrestricted file upload vulnerability in the file attachment feature, letting attackers upload and execute arbitrary PHP code, exploit requires no special privileges. id: CVE-2026-48939 info: name: Joomla iCagenda 3.9.10 - Unauthenticated Arbitrary File...

10CVSS5.9AI score0.24347EPSS
SaveExploits5References2
Nuclei
Nuclei
added 13 hours ago36 views

Joomla! Harmis Messenger 1.2.2 - Local File Inclusion

Joomla! Harmis Messenger 1.2.2 is vulnerable to local file inclusion which could give an attacker read access to arbitrary files. id: CVE-2019-9922 info: name: Joomla! Harmis Messenger 1.2.2 - Local File Inclusion author: 0xAkoko severity: high description: Joomla! Harmis Messenger 1.2.2 is...

7.5CVSS6.4AI score0.1059EPSS
SaveExploits0References5
Nuclei
Nuclei
added 13 hours ago42 views

Joomla! Component com_blog - Directory Traversal

A directory traversal vulnerability in index.php in the MyBlog commyblog component 3.0.329 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the task parameter. id: CVE-2010-1540 info: name: Joomla! Component comblog - Directory Traversal author: daffainfo severity:...

5CVSS5.5AI score0.08233EPSS
SaveExploits2References2
Nuclei
Nuclei
added 13 hours ago44 views

Joomla! Component PowerMail Pro 1.5.3 - Local File Inclusion

A directory traversal vulnerability in the givesight PowerMail Pro compowermail component 1.5.3 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1532 info: name: Joomla!...

5CVSS5.7AI score0.1633EPSS
SaveExploits3References4
Nuclei
Nuclei
added 13 hours ago44 views

Joomla! Component AlphaUserPoints 1.5.5 - Local File Inclusion

A directory traversal vulnerability in the AlphaUserPoints comalphauserpoints component 1.5.5 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the view parameter to index.php. id: CVE-2010-1476 info: name: Joomla! Componen...

6.8CVSS5.7AI score0.0994EPSS
SaveExploits2References5
Rows per page
Query Builder