Login Request a demo
CM
Product
Com Mailto
by Joomla · last CVE May 1, 2009
2
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Vulnerabilities2In the news0Timeline
Severity mix
Critical 0High 0Medium 0Low 0
Severity
All severities2Critical0High0Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Com Mailto to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2009-1499
–
2%
May 1
SQL injection vulnerability in the MailTo (aka com_mailto) component in Joomla! allows remote attackers to execute arbitrary SQL commands via the article parameter in index.php
Affected: All versions, or not specified
CVE-2008-4103
–
1%
Sep 18
The mailto (aka com_mailto) component in Joomla! 1.5 before 1.5.7 sends e-mail messages without validating the URL, which allows remote attackers to transmit spam
Affected: All versions, or not specified
Showing 2