CVE-2025-26855 Extension - joomcar.net - SQL injection in Articles Calendar 1.0.0 - 1.0.1.0007 for Joomla

A SQL injection in Articles Calendar extension 1.0.0 - 1.0.1.0007 for Joomla allows attackers to execute arbitrary SQL commands...

CVE-2025-26855

The CVE-2025-26855 entry pertains to a SQL injection in the Joomla plugin/extension “Articles Calendar” (versions 1.0.0 through 1.0.1.0007) by Joomcar Extensions. The vulnerability arises in this extension and allows an attacker to execute arbitrary SQL commands. Affected component: Articles Cale...

CVE-2025-26855 Extension - joomcar.net - SQL injection in Articles Calendar 1.0.0 - 1.0.1.0007 for Joomla

A SQL injection in Articles Calendar extension 1.0.0 - 1.0.1.0007 for Joomla allows attackers to execute arbitrary SQL commands...

CVE-2025-26854 Extension - joomcar.net - SQL injection in Articles Good Search 1.0.0 - 1.2.4.0011 for Joomla

A SQL injection in Articles Good Search extension 1.0.0 - 1.2.4.0011 for Joomla allows attackers to execute arbitrary SQL commands...

CVE-2025-26854 Extension - joomcar.net - SQL injection in Articles Good Search 1.0.0 - 1.2.4.0011 for Joomla

A SQL injection in Articles Good Search extension 1.0.0 - 1.2.4.0011 for Joomla allows attackers to execute arbitrary SQL commands...

CVE-2025-26854

The CVE-2025-26854 entry describes a SQL injection in the Joomla extension Articles Good Search (versions 1.0.0–1.2.4.0011). In affected releases, attackers can execute arbitrary SQL commands. Mitigation: upgrade to a version later than 1.2.4.0011 (per PT-2025-30010) or apply vendor-provided fixe...

RSJoomla! RSFiles! component for Joomla 资源管理错误漏洞

RSJoomla! RSFiles! component for Joomla is an extension component for the Joomla content management system from RSJoomla! A resource management error vulnerability exists in RSJoomla! RSFiles! component for Joomla versions 1.16.3 through 1.17.7, which stems from mishandling of the search function...

Joomcar Extensions Articles Calendar 注入漏洞

Joomcar Extensions Articles Calendar is a Joomla plugin from Joomcar Extensions. A SQL injection vulnerability exists in Joomcar Extensions Articles Calendar versions 1.0.0 through 1.0.1.0007, which stems from vulnerability to SQL injection attacks...

Joomcar Extensions Articles Good Search SQL注入漏洞

Joomcar Extensions Articles Good Search is a Joomla plugin from Joomcar Extensions, Inc. A SQL injection vulnerability exists in Joomcar Extensions Articles Good Search versions 1.0.0 through 1.2.4.0011, which stems from vulnerability to SQL injection attacks...

PT-2025-30011 · Joomla · Articles Calendar

Name of the Vulnerable Software and Affected Versions: Articles Calendar versions 1.0.0 through 1.0.1.0007 Description: A SQL injection issue exists in the Articles Calendar extension for Joomla. This allows attackers to execute arbitrary SQL commands. Recommendations: Update Articles Calendar to...

PT-2025-30022 · Joomla · Balbooa Forms

Name of the Vulnerable Software and Affected Versions: Balbooa Forms versions 1.0.0 through 2.3.1.1 Description: A SQL injection issue exists in the Balbooa Forms plugin for Joomla. Privileged users can execute arbitrary SQL commands through the id parameter. Recommendations: Balbooa Forms versio...

PT-2025-30021 · Joomla · Js Jobs Plugin

Name of the Vulnerable Software and Affected Versions: JS Jobs plugin for Joomla versions 1.0.0 through 1.4.1 Description: A SQL injection vulnerability in the JS Jobs plugin for Joomla allows low-privilege users to execute arbitrary SQL commands via the cvid parameter in the employee application...

PT-2025-30010 · Joomla · Joomla! +1

Name of the Vulnerable Software and Affected Versions: Articles Good Search extension for Joomla versions 1.0.0 through 1.2.4.0011 Description: A SQL injection issue exists in the Articles Good Search extension for Joomla. This allows attackers to execute arbitrary SQL commands. Recommendations:...

PT-2025-30027 · Joomla +1 · Joomla! +1

Name of the Vulnerable Software and Affected Versions: RSBlog! versions 1.11.6 through 1.14.5 Description: A stored cross-site scripting XSS issue exists in the RSBlog! component for Joomla. The issue allows remote authenticated users to inject arbitrary web script or HTML code via the jformtags...

RSJoomla! RSBlog! component for Joomla 跨站脚本漏洞

RSJoomla! RSBlog! component for Joomla is an extension component for the Joomla content management system from RSJoomla! A cross-site scripting vulnerability exists in RSJoomla! RSBlog! component for Joomla versions 1.11.6 through 1.14.5, which stems from improper handling of the jform tagstext...

Joomsky JS Jobs SQL注入漏洞

Joomsky JS Jobs is a Joomla Content Management System CMS based recruitment management plugin from Joomsky. A SQL injection vulnerability exists in Joomsky JS Jobs versions 1.0.0 through 1.4.1, which stems from an incorrect manipulation of the parameter cvid resulting in a SQL injection attack...

RSJoomla! RSDirectory! component for Joomla 跨站脚本漏洞

RSJoomla! RSDirectory! component for Joomla is an extension component for the Joomla content management system from RSJoomla! A cross-site scripting vulnerability exists in RSJoomla! RSDirectory! component for Joomla versions 1.0.0 through 2.2.8, which stems from mishandling of the comment reply...

RSJoomla! RSMail! component for Joomla 跨站脚本漏洞

RSJoomla! RSMail! component for Joomla is an extension component for the Joomla content management system from RSJoomla! A cross-site scripting vulnerability exists in RSMail component versions 1.19.20 through 1.22.26, which stems from improper handling of specially crafted parameters and could...

PT-2025-30023 · WordPress · Balbooa Gallery

Name of the Vulnerable Software and Affected Versions: Balbooa Gallery plugin versions 1.0.0 through 2.4.0 Description: A stored cross-site scripting XSS issue exists in the Balbooa Gallery plugin for Joomla. Privileged users can store malicious scripts within gallery items. Recommendations: Upda...

PT-2025-30024 · Rsjoomla · Rsmail!

Name of the Vulnerable Software and Affected Versions: RSMail! versions 1.19.20 through 1.22.26 Description: A reflected cross-site scripting XSS issue exists in the RSMail! component for Joomla. The issue allows remote attackers to inject arbitrary web script or HTML via a manipulated parameter...