Export limit exceeded: 16042 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2010-0467

Directory traversal vulnerability in the ccNewsletter (com_ccnewsletter) component 1.0.5 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter in a ccnewsletter action to index.php.

CVSS 3.1 · 5.8 Medium EPSS 43.3% KEV · Not listed
Vendors
Chillcreations Joomla
Products
Com Ccnewsletter Joomla\!
CVE-2010-4853

SQL injection vulnerability in the ccInvoices (com_ccinvoices) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a viewInv action to index.php.

CVSS 2.0 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Chillcreations Joomla
Products
Com Ccinvoices Joomla\!
CVE-2011-5099

SQL injection vulnerability in helper/popup.php in the ccNewsletter (mod_ccnewsletter) component 1.0.7 through 1.0.9 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVSS 2.0 · 7.5 High EPSS 1.3% KEV · Not listed
Vendors
Chillcreations Joomla
Products
Mod Ccnewsletter Joomla\!
CVE-2018-5989

SQL Injection exists in the ccNewsletter 2.x component for Joomla! via the id parameter in a task=removeSubscriber action, a related issue to CVE-2011-5099.

CVSS 3.1 · 9.8 Critical EPSS 2.6% KEV · Not listed
Vendors
Chillcreations
Products
Ccnewsletter