Joomla! Extensions Directory™

Download
Launch
  • Home
  • Vulnerable Extensions
  • Vulnerable Extensions

Vulnerable Extensions

This category lists vulnerable extensions for which no patch is known to  exists. You are recommended to uninstall any listed here from your site. Patched extensions are moved to the Resolved category.

Filters
List of articles in category Vulnerable Extensions
Title Published Date
recipe manager,2.2,SQL Injection 06 March 2017
Abstract manager,2.1,SQL Injection 06 March 2017
Ajax search for K2,2.2,SQL Injection 06 March 2017
je grid folio,probably all versions,SQL Injection 20 February 2017
JE Property Finder,1.6.3,SQL Injection 17 February 2017
RSMonials,2.2 and previous,XSS (Cross Site Scripting) 11 January 2017
JMS Support Online module, 2.0.0, XSS (Cross Site Scripting) 28 December 2016
AVChat Video Chat Integration Kit, File permissions 03 December 2016
HDW Player, 3.2.1 and older 24 October 2016
Huge IT Googlemaps,1.0.9,SQL Injection 26 September 2016
aceftp,unknown version,Other 17 August 2016
Yeeditor, abandonware 06 May 2016
Easy Youtube Gallery , 1.0.2,Information Disclosure 20 April 2016
Template Monster various themes 20 April 2016
User Group FTW For Hikashop,1.1.5,Other 07 April 2016
Jetext (abandonware), all version 09 October 2015
Vnmshop (abandonware), all versions 27 September 2015
JACC,3.0.3,XSS (Cross Site Scripting) 19 August 2015
Memorix component, any version (abandonware), SQL Injection 17 August 2015
Informations component, any version (abandonware), SQL Injection 17 August 2015
WFLab Joomshopping carousel module,1.1.2 beta and below,SQLi 09 August 2015
Araticlhess Module [mod_araticlhess] / [mod_araticlhes], all versions, fake/backdoor 02 August 2015
MyBlog by Azrul, abandonware, SQLi & AFU 24 July 2015
SimpleImageUpload by Tuts4You, 1.2 and below, Other 26 June 2015
Contus HD Video Share (aka HDVideoShare) by Apptha [com_contushdvideoshare], 3.5 and below, Directory Traversal 25 June 2015