Joomla!@2.5.0 Security Vulnerabilities and Issues — Joomla!@2.5.0 CVE List

Lucene search

JoomlaJoomla!2.5.0

11 matches found

CVE•added 2012/09/06 9:55 p.m.•53 views

CVE-2012-1612

Cross-site scripting (XSS) vulnerability in the update manager in Joomla! 2.5.x before 2.5.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

4.3CVSS5.8AI score0.00011EPSS

CVE•added 2012/10/31 4:55 p.m.•53 views

CVE-2012-4531

Cross-site scripting (XSS) vulnerability in Joomla! 2.5.x before 2.5.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

4.3CVSS5.8AI score0.00011EPSS

CVE•added 2012/10/31 4:55 p.m.•52 views

CVE-2012-4532

Cross-site scripting (XSS) vulnerability in modules/mod_languages/tmpl/default.php in the Language Switcher module for Joomla! 2.5.x before 2.5.7 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to index.php. NOTE: some of these details are obtained from third party ...

4.3CVSS5.9AI score0.00022EPSS

CVE•added 2012/11/11 1:1 p.m.•46 views

CVE-2012-5827

Joomla! 2.5.x before 2.5.8 and 3.0.x before 3.0.2 allows remote attackers to conduct clickjacking attacks via unspecified vectors involving "Inadequate protection."

4.3CVSS6.8AI score0.00012EPSS

CVE•added 2012/09/26 12:55 a.m.•42 views

CVE-2012-1116

SQL injection vulnerability in Joomla! 1.7.x and 2.5.x before 2.5.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

7.5CVSS8.7AI score0.00119EPSS

CVE•added 2012/09/06 7:55 p.m.•39 views

CVE-2012-0835

Unspecified vulnerability in Joomla! 1.7.x before 1.7.5 and 2.5.x before 2.5.1 allows attackers to obtain sensitive information via unknown vectors related to "administrator."

5CVSS6.1AI score0.00011EPSS

CVE•added 2012/09/06 7:55 p.m.•39 views

CVE-2012-0837

Joomla! 1.7.x before 1.7.5 and 2.5.x before 2.5.1 allows attackers to obtain the installation path via unspecified vectors related to "administrator."

5CVSS6.6AI score0.00011EPSS

CVE•added 2012/09/26 12:55 a.m.•38 views

CVE-2012-1117

Cross-site scripting (XSS) vulnerability in Joomla! 2.5.0 and 2.5.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

4.3CVSS5.8AI score0.00011EPSS

CVE•added 2012/07/03 7:55 p.m.•38 views

CVE-2012-2747

Unspecified vulnerability in Joomla! 2.5.x before 2.5.5 allows remote attackers to gain privileges via unknown attack vectors related to "Inadequate checking."

7.5CVSS7AI score0.00067EPSS

CVE•added 2012/09/06 9:55 p.m.•35 views

CVE-2012-1611

Joomla! 2.5.x before 2.5.4 does not properly check permissions, which allows attackers to obtain sensitive "administrative back end" information via unknown attack vectors. NOTE: this might be a duplicate of CVE-2012-1599.

5CVSS6.1AI score0.00451EPSS

CVE•added 2012/07/03 7:55 p.m.•34 views

CVE-2012-2748

Unspecified vulnerability in Joomla! 2.5.x before 2.5.5 allows remote attackers to obtain sensitive information via vectors related to "Inadequate filtering" and a "SQL error."

5CVSS6.2AI score0.0055EPSS