Export limit exceeded: 21746 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 21,746

Export CSV
CVE-2018-6005

SQL Injection exists in the Realpin through 1.5.04 component for Joomla! via the pinboard parameter.

CVSS 3.0 · 9.8 Critical EPSS 2.7% KEV · Not listed
Vendors
Realpin Project
Products
Realpin
CVE-2018-5994

SQL Injection exists in the JS Jobs 1.1.9 component for Joomla! via the zipcode parameter in a newest-jobs request, or the ta parameter in a view_resume request.

CVSS 3.0 · 9.8 Critical EPSS 2.7% KEV · Not listed
Vendors
Joomsky
Products
Js Jobs
CVE-2018-5993

SQL Injection exists in the Aist through 2.0 component for Joomla! via the id parameter in a view=showvacancy request.

CVSS 3.0 · 9.8 Critical EPSS 2.7% KEV · Not listed
Vendors
Aist Project
Products
Aist
CVE-2018-5992

SQL Injection exists in the Staff Master through 1.0 RC 1 component for Joomla! via the name parameter in a view=staff request.

CVSS 3.0 · 9.8 Critical EPSS 2.7% KEV · Not listed
Vendors
Staff Master Project
Products
Staff Master
CVE-2018-5991

SQL Injection exists in the Form Maker 3.6.12 component for Joomla! via the id, from, or to parameter in a view=stats request, a different vulnerability than CVE-2015-2798.

CVSS 3.0 · 9.8 Critical EPSS 2.7% KEV · Not listed
Vendors
Web-dorado
Products
Form Maker
CVE-2018-5989

SQL Injection exists in the ccNewsletter 2.x component for Joomla! via the id parameter in a task=removeSubscriber action, a related issue to CVE-2011-5099.

CVSS 3.1 · 9.8 Critical EPSS 2.6% KEV · Not listed
Vendors
Chillcreations
Products
Ccnewsletter
CVE-2018-5987

SQL Injection exists in the Pinterest Clone Social Pinboard 2.0 component for Joomla! via the pin_id or user_id parameter in a task=getlikeinfo action, the ends parameter in a view=gift action, the category parameter in a view=home action, the uid parameter in a view=pindisplay action, the searchVal parameter in a view=search action, or the uid parameter in a view=likes action.

CVSS 3.0 · 9.8 Critical EPSS 2.7% KEV · Not listed
Vendors
Social Pinboard Project
Products
Social Pinboard
CVE-2018-5985

SQL Injection exists in the LiveCRM SaaS Cloud 1.0 component for Joomla! via an r=site/login&company_id= request.

CVSS 3.0 · 9.8 Critical EPSS 19.1% KEV · Not listed
Vendors
Livecrm
Products
Livecrm Saas Cloud
CVE-2018-5984

SQL Injection exists in the Tumder (An Arcade Games Platform) 2.1 component for Joomla! via the PATH_INFO to the category/ URI.

CVSS 3.0 · 9.8 Critical EPSS 2.7% KEV · Not listed
Vendors
Tumder Project
Products
Tumder
CVE-2018-5982

SQL Injection exists in the Advertisement Board 3.1.0 component for Joomla! via a task=show_rss_categories&catname= request.

CVSS 3.0 · 9.8 Critical EPSS 2.7% KEV · Not listed
Vendors
Ordasoft
Products
Advertisement Board
CVE-2018-5981

SQL Injection exists in the Gallery WD 1.3.6 component for Joomla! via the tag_id parameter or gallery_id parameter.

CVSS 3.0 · 9.8 Critical EPSS 2.7% KEV · Not listed
Vendors
Web-dorado
Products
Gallery Wd
CVE-2018-5980

SQL Injection exists in the Solidres 2.5.1 component for Joomla! via the direction parameter in a hub.search action.

CVSS 3.0 · 9.8 Critical EPSS 3.8% KEV · Not listed
Vendors
Solidres
Products
Solidres
CVE-2018-5979

SQL Injection exists in Wchat Fully Responsive PHP AJAX Chat Script 1.5 via the login.php User field.

CVSS 3.0 · 9.8 Critical EPSS 19.1% KEV · Not listed
Vendors
Wchat Project
Products
Wchat
CVE-2018-5978

SQL Injection exists in Facebook Style Php Ajax Chat Zechat 1.5 via the login.php User field.

CVSS 3.0 · 9.8 Critical EPSS 2.7% KEV · Not listed
Vendors
Zechat Project
Products
Zechat
CVE-2018-5977

SQL Injection exists in Affiligator Affiliate Webshop Management System 2.1.0 via a search/?q=&price_type=range&price= request.

CVSS 3.0 · 9.8 Critical EPSS 1.9% KEV · Not listed
Vendors
Getaffiligator
Products
Affiligator