Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2026-76570

Joomla Extension - joomcode.com - Unauthenticated SQL injection in read and write queries in JCTables < 1.21.1

Joomla Extension - joomcode.com - Unauthenticated SQL injection in read and write queries in JCTables 1.21.1 - The front-end CRUD API controller performs no Joomla token validation and no authentication check on any task. Table names, column names, and values are taken directly from request parameters and concatenated into SQL queries, allowing SQLi for reading and writing queries.

CVSS 4.0 · 10 Critical EPSS < 1% KEV · Not listed
Vendors
Joomcode Joomcoder.com
Products
Jc Tables Jctables Extension For Joomla
CVE-2026-49048

Joomla Extension - joomcoder.com - Unauthenticated SQL Injection in JoomCCK extension for Joomla < 6.4.1

The Joomla extension JoomCCK exposes a front-end controller task, that builds two SQL statements by directly concatenating a user-supplied request parameter into the query string without escaping or parameterisation.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Joomcoder Joomcoder.com
Products
Joomcck Joomcck Extension For Joomla