Search vulnerabilities

Results 2

Export CSV
CVE-2008-4103

The mailto (aka com_mailto) component in Joomla! 1.5 before 1.5.7 sends e-mail messages without validating the URL, which allows remote attackers to transmit spam.

CVSS 2.0 · 5.0 Medium EPSS 1.5% KEV · Not listed
Vendors
Products
CVE-2009-1499

SQL injection vulnerability in the MailTo (aka com_mailto) component in Joomla! allows remote attackers to execute arbitrary SQL commands via the article parameter in index.php. NOTE: SecurityFocus states that this issue has been disputed by the vendor.

CVSS 2.0 · 7.5 High EPSS 1.8% KEV · Not listed
Vendors
Products