JO
Vendor
Joobi
7
CVEs
0
On KEV
0
New 30D
Products
JN8.8
Jnews
Joobi
3 CVEs0 on KEV0 new
CJ–
Com Jnews
Joobi
2 CVEs0 on KEV0 new
AC–
Acajoom
Joobi
1 CVEs0 on KEV0 new
CJ–
Com Jstore
Joobi
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2015-7342 | JN Jnews Joobi | 7.2 | Mar 9 | JNews Joomla Component before 8.5.0 allows SQL injection via upload thumbnail, Queue Search Field, Subscribers Search Field, or Newsletters Search Field |
| CVE-2015-7341 | JN Jnews Joobi | 8.8 | Mar 9 | JNews Joomla Component before 8.5.0 allows arbitrary File Upload via Subscribers or Templates, as demonstrated by the .php5 extension |
| CVE-2015-7343 | JN Jnews Joobi | 4.8 | Mar 9 | JNews Joomla Component before 8.5.0 has XSS via the mailingsearch parameter |
| CVE-2013-1636 | CJ Com Jnews Joobi | – | Mar 12 | Cross-site scripting (XSS) vulnerability in open-flash-chart.swf in Open Flash Chart (aka Open-Flash Chart), as used in the Pretty Link Lite plugin before 1.6.3 for WordPress,… |
| CVE-2010-5286 | CJ Com Jstore Joobi | – | Nov 26 | Directory traversal vulnerability in Jstore (com_jstore) component for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a |
| CVE-2012-4256 | CJ Com Jnews Joobi | – | Aug 13 | The jNews (com_jnews) component 7.5.1 for Joomla! allows remote attackers to obtain sensitive information via the emailsearch parameter, which reveals the installation path in an… |
| CVE-2008-1427 | AC Acajoom Joobi | – | Mar 20 | SQL injection vulnerability in the Joobi Acajoom (com_acajoom) 1.1.5 and 1.2.5 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the mailingid… |