http://docs.joomla.org/Vulnerable_Extensions_List This is a combined feed, containing items from several feed sources. en MediaWiki 1.19.3 via WikiArticleFeeds 0.6.6 Sat, 25 May 2013 17:55:13 GMT http://docs.joomla.org/Vulnerable_Extensions_List#civic_crm_422 http://docs.joomla.org/Vulnerable_Extensions_List#civic_crm_422 </td> <td>upload exploit /RFI </td> <td>260413 </td> <td>developer <a rel="nofollow" class="external free" href="http://civicrm.org/category/civicrm-blog-categories/civicrm-v43">http://civicrm.org/category/civicrm-blog-categories/civicrm-v43</a> release 4.3.1 </td></tr> <tr> <td style="background:#cef2e0; color:black"> http://docs.joomla.org/Vulnerable_Extensions_List#alfcontact http://docs.joomla.org/Vulnerable_Extensions_List#alfcontact </td> <td>xss </td> <td>230413 </td> <td>developer release <a rel="nofollow" class="external text" href="http://www.alfsoft.com">statement on ALFContact v2.0.8 for J!2.5 ALFContact v3.1.4 for J!3</a> </td></tr> <tr> <td> http://docs.joomla.org/Vulnerable_Extensions_List#aiContactSafe_2.0.19 http://docs.joomla.org/Vulnerable_Extensions_List#aiContactSafe_2.0.19 </td> <td>xss </td> <td>160413 </td> <td>developer release statement <a rel="nofollow" class="external text" href="http://www.algisinfo.com/en/home-bottom/41-xss-in-aicontactsafe.html">for version 2.0.21</a> </td></tr> <tr> <td style="background:#cef2e0; color:black"> http://docs.joomla.org/Vulnerable_Extensions_List#RSfiles http://docs.joomla.org/Vulnerable_Extensions_List#RSfiles </td> <td>SQL </td> <td>180313 </td> <td>developer release statement <a rel="nofollow" class="external text" href="http://www.rsjoomla.com/support/documentation/view-knowledgebase/141-changelog.html">for version 12</a> </td></tr> <tr> <td style="background:#cef2e0; color:black"> http://docs.joomla.org/Vulnerable_Extensions_List#Multiple_Customfields_Filter_for_Virtuemart http://docs.joomla.org/Vulnerable_Extensions_List#Multiple_Customfields_Filter_for_Virtuemart </td> <td>SQLi </td> <td>18212 </td> <td>developers <a rel="nofollow" class="external text" href="http://myext.eu/en/update/47-v1-66">1.6.8 update statement</a> </td></tr> <tr> <td style="background:#cef2e0; color:black"> http://docs.joomla.org/Vulnerable_Extensions_List#Collector http://docs.joomla.org/Vulnerable_Extensions_List#Collector </td> <td>Various [steevo.fr] </td> <td>230113 </td> <td>developer update <a rel="nofollow" class="external text" href="http://www.steevo.fr/en/component/content/article/41-release-051">statement to</a> 0.5.1 </td></tr> <tr> <td style="background:#cef2e0; color:black"> http://docs.joomla.org/Vulnerable_Extensions_List#tz_guestbook http://docs.joomla.org/Vulnerable_Extensions_List#tz_guestbook </td> <td>Various </td> <td>100113 </td> <td>developer release statement <a rel="nofollow" class="external text" href="http://www.templaza.com/item/256-tz-guestbook-v1-1-2-security-release">for 1.1.2</a> </td></tr> <tr> <td> http://docs.joomla.org/Vulnerable_Extensions_List#extplorer http://docs.joomla.org/Vulnerable_Extensions_List#extplorer </td> <td> 2.1.2, 2.1.1, 2.1.0 and 2.1.0RC5 are vulnerable to an authentication bypass </td> <td>251212 </td> <td>developer <a rel="nofollow" class="external text" href="http://extplorer.net/news/12">update to 2.1.3 statement</a> </td></tr> <tr> <td style="background:#cef2e0; color:black"> http://docs.joomla.org/Vulnerable_Extensions_List#JooProperty http://docs.joomla.org/Vulnerable_Extensions_List#JooProperty </td> <td>SQLi </td> <td>101212 </td> <td>developer release new version 1.13.1 - <a rel="nofollow" class="external text" href="http://jooproperty.com/en/forum/last-jooproperty-release/277-important-security-fix-released-please-update.html#277">upgrade notice</a> </td></tr> <tr> <td style="background:#cef2e0; color:black"> http://docs.joomla.org/Vulnerable_Extensions_List#Multiple_Customfields_Filter_for_Virtuemart_2 http://docs.joomla.org/Vulnerable_Extensions_List#Multiple_Customfields_Filter_for_Virtuemart_2 </td> <td>SQLi </td> <td>18212 </td> <td>developers <a rel="nofollow" class="external text" href="http://myext.eu/en/update/47-v1-66">update statement</a> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#ag_google_analytic http://docs.joomla.org/Vulnerable_Extensions_List#ag_google_analytic </td> <td>Various </td> <td>061212 </td> <td> </td></tr> <tr> <td> http://docs.joomla.org/Vulnerable_Extensions_List#sh404sef_.3C3.7.0 http://docs.joomla.org/Vulnerable_Extensions_List#sh404sef_.3C3.7.0 </td> <td>Undisclosed sh404SEF 3.4.x, 3.5.x, 3.6.x for Joomla 2.5 </td> <td>26112 </td> <td>developer <a rel="nofollow" class="external text" href="http://anything-digital.com/sh404sef/news/releases/sh404sef-3_7_0_1485-released.html">statement</a> </td></tr> <tr> <td style="background:#cef2e0; color:black"> http://docs.joomla.org/Vulnerable_Extensions_List#Login_Failed_Log http://docs.joomla.org/Vulnerable_Extensions_List#Login_Failed_Log </td> <td>23112 </td> <td>ID - information disclosure </td> <td>developer <a rel="nofollow" class="external text" href="http://www.jm-experts.com/extensions-tools/login-failed-log">release statement</a> to ver 1.5.4 </td></tr> <tr> <td> http://docs.joomla.org/Vulnerable_Extensions_List#jNews http://docs.joomla.org/Vulnerable_Extensions_List#jNews </td> <td> </td> <td>131112 </td> <td>developer update <a rel="nofollow" class="external text" href="http://www.joobi.co/index.php?option=com_content&amp;view=article&amp;id=8560:security-release-update-to-jnews-79x&amp;catid=93:jnews&amp;Itemid=225">statement to version 7.9.1</a> 151112 </td></tr> <tr> <td style="background:#cef2e0; color:black"> <p><br /> </p> http://docs.joomla.org/Vulnerable_Extensions_List#Joombah_Jobs http://docs.joomla.org/Vulnerable_Extensions_List#Joombah_Jobs </td> <td>Upload restriction issues </td> <td>131112 </td> <td>developer update <a rel="nofollow" class="external text" href="http://www.joombah.com/home/item/joombah-jobs-security-release-update-now">statement</a> </td></tr> <tr> <td style="background:#cef2e0; color:black"> http://docs.joomla.org/Vulnerable_Extensions_List#commedia http://docs.joomla.org/Vulnerable_Extensions_List#commedia </td> <td>RFI </td> <td>231012 </td> <td>developer update <a rel="nofollow" class="external text" href="http://www.ecolora.com/index.php/15-commedia-a-mp3browser-new/77-commedia-3-2-is-not-vulnerable#english">statement to version 3.2</a> 271012 </td></tr> <tr> <td style="background:#cef2e0; color:black"> <p><br /> </p> http://docs.joomla.org/Vulnerable_Extensions_List#Kunena http://docs.joomla.org/Vulnerable_Extensions_List#Kunena </td> <td>SQLi + ID </td> <td>221012 </td> <td>Developer states <a rel="nofollow" class="external text" href="http://www.kunena.org/forum/announcement/id-52">current version not exploitable</a> by reported methods </td></tr> <tr> <td style="background:#cef2e0; color:black"> <p><br /> </p> http://docs.joomla.org/Vulnerable_Extensions_List#Icagenda http://docs.joomla.org/Vulnerable_Extensions_List#Icagenda </td> <td>SQLi </td> <td> </td> <td>Developer <a rel="nofollow" class="external text" href="http://www.joomlic.com/en/extensions/icagenda">statement for 1.2.9</a> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#JTag_.5Bjoomlatag.5D http://docs.joomla.org/Vulnerable_Extensions_List#JTag_.5Bjoomlatag.5D </td> <td>SQLi </td> <td> </td> <td> </td></tr> <tr> <td style="background:#cef2e0; color:black"> http://docs.joomla.org/Vulnerable_Extensions_List#Freestyle_Support http://docs.joomla.org/Vulnerable_Extensions_List#Freestyle_Support </td> <td>SQLi </td> <td> </td> <td>developer update <a rel="nofollow" class="external text" href="http://freestyle-joomla.com/help/announcements?announceid=60">statement 251012</a> </td></tr> <tr> <td style="background:#cef2e0; color:black"> http://docs.joomla.org/Vulnerable_Extensions_List#ACEFTP http://docs.joomla.org/Vulnerable_Extensions_List#ACEFTP </td> <td>DT </td> <td>011012 </td> <td>AceFTP 2.0.0 released. Developer <a rel="nofollow" class="external text" href="http://www.joomace.net/blog/aceftp/aceftp-200-has-been-released">statement</a> 101012 </td></tr> <tr> <td> http://docs.joomla.org/Vulnerable_Extensions_List#MijoFTP http://docs.joomla.org/Vulnerable_Extensions_List#MijoFTP </td> <td>DT </td> <td>011012 </td> <td>*<i>reported fixed prior to notification</i>* </td></tr> <tr> <td style="background:#cef2e0; color:black"> http://docs.joomla.org/Vulnerable_Extensions_List#spider_calendar_lite http://docs.joomla.org/Vulnerable_Extensions_List#spider_calendar_lite </td> <td>RFI </td> <td>180912 </td> <td>developer release version 1.5 <a rel="nofollow" class="external text" href="http://web-dorado.com/products/joomla-calendar-module.html">version</a> </td></tr> <tr> <td> http://docs.joomla.org/Vulnerable_Extensions_List#RokModule http://docs.joomla.org/Vulnerable_Extensions_List#RokModule </td> <td>SQLi </td> <td>Rereported 180912 </td> <td>Developer states: no known exploits for our current versions <a rel="nofollow" class="external text" href="http://www.rockettheme.com/extensions-downloads/free/1012-rokmodule">of RokModule Joomla 2.5 - v1.3 Joomla 1.5 - v1.4</a> </td></tr> <tr> <td style="background:#cef2e0; color:black"> http://docs.joomla.org/Vulnerable_Extensions_List#ICagenda_2 http://docs.joomla.org/Vulnerable_Extensions_List#ICagenda_2 </td> <td> SQLi </td> <td>developer <a rel="nofollow" class="external text" href="http://www.joomlic.com/en/extensions/icagenda">security release</a> - v1.2.1 </td> <td>080912 </td></tr> <tr> <td style="background:#cef2e0; color:black"> <p><br /> </p> http://docs.joomla.org/Vulnerable_Extensions_List#En_Masse_cart http://docs.joomla.org/Vulnerable_Extensions_List#En_Masse_cart </td> <td>RFI </td> <td>060812 </td> <td>Developer upgrade statement <a rel="nofollow" class="external text" href="http://www.matamko.com/news-update/14-en-masse-releases/142-announcement-for-security-release-enmasse-313.html">to 3.1.3</a> </td></tr> <tr> <td> http://docs.joomla.org/Vulnerable_Extensions_List#JCE_.28joomla_content_editor.29 http://docs.joomla.org/Vulnerable_Extensions_List#JCE_.28joomla_content_editor.29 </td> <td>Upload Restriction &lt;2.2.4 </td> <td>050812 </td> <td>Developer states current version not exploitable </td></tr> <tr> <td> http://docs.joomla.org/Vulnerable_Extensions_List#RSGallery2 http://docs.joomla.org/Vulnerable_Extensions_List#RSGallery2 </td> <td>SQLi XSS </td> <td> 31 07 12 </td> <td>Devleoper statement versions 3.2.0 for Joomla 2.5 and version 2.3.0 for Joomla 1.5 <a rel="nofollow" class="external text" href="http://www.rsgallery2.nl/topicseen./announcements/rsgallery2_3.2.0_and_2.3.0_released_16845.msg44046.html">released</a> </td></tr> <tr> <td style="background:#cef2e0; color:black"> http://docs.joomla.org/Vulnerable_Extensions_List#osproperty http://docs.joomla.org/Vulnerable_Extensions_List#osproperty </td> <td>Unrestricted uploads </td> <td>160712 </td> <td>Developer release <a rel="nofollow" class="external text" href="http://joomservices.com/components/ossolution-property.html">version 2.0.3</a> 180712 </td></tr> <tr> <td style="background:#cef2e0; color:black"> http://docs.joomla.org/Vulnerable_Extensions_List#KSAdvertiser http://docs.joomla.org/Vulnerable_Extensions_List#KSAdvertiser </td> <td> RFI </td> <td>160712 </td> <td>The security update version 1.5.72 advise can be found here: <p><a rel="nofollow" class="external text" href="http://www.kiss-software.de/index.php?option=com_content&amp;view=article&amp;id=251:kiss-advertiser-sicherheitsupdate&amp;catid=69&amp;Itemid=361&amp;lang=de">German</a> <a rel="nofollow" class="external text" href="http://www.kiss-software.de/index.php?option=com_content&amp;view=article&amp;id=252:kiss-advertiser-security-update&amp;catid=21&amp;Itemid=362&amp;lang=en">English</a> </p> </td></tr> <tr> <td style="background:#cef2e0; color:black"> http://docs.joomla.org/Vulnerable_Extensions_List#Shipping_by_State_for_Virtuemart http://docs.joomla.org/Vulnerable_Extensions_List#Shipping_by_State_for_Virtuemart </td> <td>elevated permissions (<a rel="nofollow" class="external free" href="http://web-expert.gr/en">http://web-expert.gr/en</a>) </td> <td>160612 </td> <td> <a rel="nofollow" class="external text" href="http://web-expert.gr/en/commersial/virtuemart-shipping-by-state-component">Upgrade to v2.5 download</a> commercial product 300612 </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#ownbiblio_1.5.3 http://docs.joomla.org/Vulnerable_Extensions_List#ownbiblio_1.5.3 </td> <td>SQLi + </td> <td>250512 </td> <td> </td></tr> <tr> <td> http://docs.joomla.org/Vulnerable_Extensions_List#Ninjaxplorer_.3C.3D1.0.6 http://docs.joomla.org/Vulnerable_Extensions_List#Ninjaxplorer_.3C.3D1.0.6 </td> <td>developer notification </td> <td>250412 </td> <td>developer statement <a rel="nofollow" class="external text" href="http://ninjaforge.com/blog/318-security-vulnerability-discovered-in-ninjaxplorer-upgrade-immediately">upgrade to 1.0.7</a> </td></tr> <tr> <td style="background:#cef2e0; color:black"> http://docs.joomla.org/Vulnerable_Extensions_List#Phoca_Fav_Icon http://docs.joomla.org/Vulnerable_Extensions_List#Phoca_Fav_Icon </td> <td>Permissions Rewrite </td> <td>150412 </td> <td> <a rel="nofollow" class="external text" href="http://www.phoca.cz/news/30-phoca-news/633-phoca-favicon-203-released">developer update 2.0.3 statement</a> </td></tr> <tr> <td style="background:#cef2e0; color:black"> http://docs.joomla.org/Vulnerable_Extensions_List#estateagent_improved http://docs.joomla.org/Vulnerable_Extensions_List#estateagent_improved </td> <td>sqli (eaimproved.eu) </td> <td>110412 </td> <td>developer states previous version, not current version </td></tr> <tr> <td> http://docs.joomla.org/Vulnerable_Extensions_List#bearleague http://docs.joomla.org/Vulnerable_Extensions_List#bearleague </td> <td>110412 </td> <td>sql </td> <td>(no longer maintained) </td></tr> <tr> <td> http://docs.joomla.org/Vulnerable_Extensions_List#JLive.21_Chat_v4.3.1 http://docs.joomla.org/Vulnerable_Extensions_List#JLive.21_Chat_v4.3.1 </td> <td>DT </td> <td>060412 </td> <td>Developer reports <a rel="nofollow" class="external text" href="http://www.cmsfruit.com/security-measures.html">as unproven</a> </td></tr> <tr> <td style="background:#cef2e0; color:black"> http://docs.joomla.org/Vulnerable_Extensions_List#virtuemart_2.0.2 http://docs.joomla.org/Vulnerable_Extensions_List#virtuemart_2.0.2 </td> <td>SQLi </td> <td>050412 </td> <td>developers <a rel="nofollow" class="external text" href="http://virtuemart.net/news/list-all-news/417-happy-easter-new-virtuemart-204-released-security-update-sqli">release statement</a>Current version 2.0.6 released </td></tr> <tr> <td> http://docs.joomla.org/Vulnerable_Extensions_List#JE_testimonial http://docs.joomla.org/Vulnerable_Extensions_List#JE_testimonial </td> <td>SQLi </td> <td>230312 </td> <td>Developer states <b>malicious report.</b> </td></tr> <tr> <td style="background:#cef2e0; color:black"> http://docs.joomla.org/Vulnerable_Extensions_List#JaggyBlog http://docs.joomla.org/Vulnerable_Extensions_List#JaggyBlog </td> <td>excessive file permission </td> <td>090212 </td> <td>version 1.3.1 <a rel="nofollow" class="external text" href="http://www.jaggysnake.co.uk/products/jaggyblog">released</a> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#Quickl_Form http://docs.joomla.org/Vulnerable_Extensions_List#Quickl_Form </td> <td>xss </td> <td>260112 </td> <td> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#com_advert http://docs.joomla.org/Vulnerable_Extensions_List#com_advert </td> <td>sqli - unknown developer </td> <td>240112 </td> <td> </td></tr> <tr> <td style="background:#cef2e0; color:black"> http://docs.joomla.org/Vulnerable_Extensions_List#Joomla_Discussions_Component http://docs.joomla.org/Vulnerable_Extensions_List#Joomla_Discussions_Component </td> <td>sqli </td> <td>180112 </td> <td>Discussions 1.4.1 released <a rel="nofollow" class="external text" href="http://www.codingfish.com/news/38-joomla/101-discussions-141-released">developer statement</a> </td></tr> <tr> <td style="background:#cef2e0; color:black"> http://docs.joomla.org/Vulnerable_Extensions_List#HD_Video_Share_.28contushdvideoshare.29 http://docs.joomla.org/Vulnerable_Extensions_List#HD_Video_Share_.28contushdvideoshare.29 </td> <td>sqli </td> <td>180112 </td> <td>updated <a rel="nofollow" class="external text" href="http://www.hdvideoshare.net">version 2.2</a> </td></tr> <tr> <td style="background:#cef2e0; color:black"> http://docs.joomla.org/Vulnerable_Extensions_List#Simple_File_Upload_1.3 http://docs.joomla.org/Vulnerable_Extensions_List#Simple_File_Upload_1.3 </td> <td>RFI </td> <td>010112 </td> <td> Developer update <a rel="nofollow" class="external text" href="http://wasen.net/index.php?option=com_content&amp;view=article&amp;id=64:simple-file-upload-download&amp;catid=40:project-simple-file-upload&amp;Itemid=59">statement</a> to 1.3.5 </td></tr> <tr> <td> http://docs.joomla.org/Vulnerable_Extensions_List http://docs.joomla.org/Vulnerable_Extensions_List# </td> <td> </td> <td> </td> <td> </td></tr></table> http://docs.joomla.org/Vulnerable_Extensions_List#Simple_File_Upload_1.3_2 http://docs.joomla.org/Vulnerable_Extensions_List#Simple_File_Upload_1.3_2 </td> <td>RFI </td> <td>010112 </td> <td> Developer update <a rel="nofollow" class="external text" href="http://wasen.net/index.php?option=com_content&amp;view=article&amp;id=64:simple-file-upload-download&amp;catid=40:project-simple-file-upload&amp;Itemid=59">statement</a> to 1.3.5 </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#Dshop http://docs.joomla.org/Vulnerable_Extensions_List#Dshop </td> <td>sqli (possibly dhrusya.com) </td> <td>201111 </td> <td> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#QContacts_1.0.6 http://docs.joomla.org/Vulnerable_Extensions_List#QContacts_1.0.6 </td> <td>sqli </td> <td>131211 </td> <td> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#Jobprofile_1.0 http://docs.joomla.org/Vulnerable_Extensions_List#Jobprofile_1.0 </td> <td> SQL Injection Vulnerability </td> <td>051211 </td> <td> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#JX_Finder_2.0.1 http://docs.joomla.org/Vulnerable_Extensions_List#JX_Finder_2.0.1 </td> <td> XSS Vulnerabilities </td> <td>011211 </td> <td> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#wdbanners http://docs.joomla.org/Vulnerable_Extensions_List#wdbanners </td> <td>Unknown Exploit </td> <td>301111 </td> <td> </td></tr> <tr> <td> http://docs.joomla.org/Vulnerable_Extensions_List#JB_Captify_Content_J1.5_and_J1.7 http://docs.joomla.org/Vulnerable_Extensions_List#JB_Captify_Content_J1.5_and_J1.7 </td> <td>Security checks missing -Versions prior to JB_mod_captifyContent_J1.5_J1.7_1.0.1.zip </td> <td>141111 </td> <td>All extensions available on the <a rel="nofollow" class="external text" href="http://joomlabamboo.com">site have been updated</a> and this potential security issue has been resolved. </td></tr> <tr> <td> http://docs.joomla.org/Vulnerable_Extensions_List#JB_Microblog http://docs.joomla.org/Vulnerable_Extensions_List#JB_Microblog </td> <td>Security checks missing - J1.7 only. Versions prior to 1.10.3 </td> <td>14111 </td> <td>All extensions available on the [joomlabamboo.com site have been updated] and this potential security issue has been resolved. </td></tr> <tr> <td> http://docs.joomla.org/Vulnerable_Extensions_List#JB_Slideshow_.3C3.5.1.2C http://docs.joomla.org/Vulnerable_Extensions_List#JB_Slideshow_.3C3.5.1.2C </td> <td>Security checks missing </td> <td>141111 </td> <td>All extensions available on the [joomlabamboo.com site have been updated] and this potential security issue has been resolved. </td></tr> <tr> <td> http://docs.joomla.org/Vulnerable_Extensions_List#JB_Bamboobox http://docs.joomla.org/Vulnerable_Extensions_List#JB_Bamboobox </td> <td>Security checks missing - J1.5 all versions prior to 1.2.2 </td> <td>141111 </td> <td>All extensions available on the [joomlabamboo.com site have been updated] and this potential security issue has been resolved. </td></tr> <tr> <td> http://docs.joomla.org/Vulnerable_Extensions_List#RokModule_2 http://docs.joomla.org/Vulnerable_Extensions_List#RokModule_2 </td> <td>SQLI - exploits RokStock RokWeather RokNewspager </td> <td>121111 </td> <td>developer release statement <a rel="nofollow" class="external text" href="http://www.rockettheme.com/blog/extensions/1300-important-security-vulnerability-fixed">RokModule v1.3 for Joomla 1.7 RokModule v1.4 for Joomla 1.5</a> </td></tr> <tr> <td style="background:#cef2e0; color:black"> http://docs.joomla.org/Vulnerable_Extensions_List#hm_community http://docs.joomla.org/Vulnerable_Extensions_List#hm_community </td> <td>Multiple Vulnerabilities </td> <td>011111 </td> <td>developer release <a rel="nofollow" class="external text" href="http://joomlaextensions.co.in/product/HM-Community">1.01</a> </td></tr> <tr> <td style="background:#cef2e0; color:black"> http://docs.joomla.org/Vulnerable_Extensions_List#Alameda http://docs.joomla.org/Vulnerable_Extensions_List#Alameda </td> <td>SQLi </td> <td>01111 </td> <td>developer statement <a rel="nofollow" class="external text" href="http://www.blueflyingfish.com/alameda/index.php?option=com_content&amp;view=category&amp;id=5&amp;Itemid=28">and Latest version number v1.0.1.</a> </td></tr> <tr> <td style="background:#cef2e0; color:black"> http://docs.joomla.org/Vulnerable_Extensions_List#Techfolio_1.0 http://docs.joomla.org/Vulnerable_Extensions_List#Techfolio_1.0 </td> <td>Techfolio 1.0 SQLI </td> <td>291011 </td> <td> </td></tr> <tr> <td style="background:#cef2e0; color:black"> http://docs.joomla.org/Vulnerable_Extensions_List#Barter_Sites_1.3 http://docs.joomla.org/Vulnerable_Extensions_List#Barter_Sites_1.3 </td> <td>Barter Sites 1.3 SQL Injection &amp; Persistent XSS vulnerabilities </td> <td>291011 </td> <td>developer <a rel="nofollow" class="external text" href="http://my.barter-sites.com/index.php?option=com_content&amp;view=article&amp;id=6&amp;Itemid=25">release 1.3.1</a> </td></tr> <tr> <td style="background:#cef2e0; color:black"> http://docs.joomla.org/Vulnerable_Extensions_List#Jeema_SMS_3.2 http://docs.joomla.org/Vulnerable_Extensions_List#Jeema_SMS_3.2 </td> <td>Jeema SMS 3.2 Multiple Vulnerabilities </td> <td>291011 </td> <td>developer resolution notice <a rel="nofollow" class="external text" href="http://jeema.net/about-us/securty-releases.html">for 3.5.2</a> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#Vik_Real_Estate_1.0 http://docs.joomla.org/Vulnerable_Extensions_List#Vik_Real_Estate_1.0 </td> <td>Vik Real Estate 1.0 Multiple Blind SqlI </td> <td>291011 </td> <td> </td></tr> <tr> <td style="background:#cef2e0; color:black"> http://docs.joomla.org/Vulnerable_Extensions_List#yj_contact http://docs.joomla.org/Vulnerable_Extensions_List#yj_contact </td> <td>LFI (youjoomla contact) </td> <td>241011 </td> <td>developer update statement <a rel="nofollow" class="external text" href="http://www.youjoomla.com/yj-contact-us-1.0.1-released.html">261011</a> </td></tr> <tr> <td style="background:#cef2e0; color:black"> http://docs.joomla.org/Vulnerable_Extensions_List#NoNumber_Framework http://docs.joomla.org/Vulnerable_Extensions_List#NoNumber_Framework </td> <td> Advanced Module Manager * AdminBar Docker * Add to Menu * Articles Anywhere * What? Nothing!* Tooltips* Tabber* Sourcerer* Slider* Timed Styles* Modules Anywhere* Modalizer* ReReplacer* Snippets* DB Replacer* CustoMenu* Content Templater* CDN for Joomla!* Cache Cleaner* Better Preview </td> <td>181011 </td> <td>see <a rel="nofollow" class="external free" href="http://feeds.feedburner.com/nonumber/news">http://feeds.feedburner.com/nonumber/news</a> for updates of various extensions </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#Time_Returns http://docs.joomla.org/Vulnerable_Extensions_List#Time_Returns </td> <td>SQLi takeaweb.it </td> <td>151011 </td> <td>No longer developed. New version 2.0.1 for Joomla 1.6/1.7 (old version are no longer supported) <a rel="nofollow" class="external free" href="http://www.takeaweb.it">http://www.takeaweb.it</a> </td></tr> <tr> <td style="background:#cef2e0; color:black"> http://docs.joomla.org/Vulnerable_Extensions_List#Simple_File_Upload http://docs.joomla.org/Vulnerable_Extensions_List#Simple_File_Upload </td> <td>LFI </td> <td>300811 </td> <td>developer advice <a rel="nofollow" class="external text" href="http://wasen.net/index.php?option=com_content&amp;view=article&amp;id=64&amp;Itemid=59">page</a> </td></tr> <tr> <td style="background:#cef2e0; color:black"> http://docs.joomla.org/Vulnerable_Extensions_List#Jumi http://docs.joomla.org/Vulnerable_Extensions_List#Jumi </td> <td>LFI </td> <td>300811 </td> <td>Developer states proper use of joomla administration/extension documentation reading </td></tr> <tr> <td style="background:#cef2e0; color:black"> http://docs.joomla.org/Vulnerable_Extensions_List#Joomla_content_editor http://docs.joomla.org/Vulnerable_Extensions_List#Joomla_content_editor </td> <td>JCE lfi/rfi vulnerability </td> <td> </td> <td>JCE 2.0.11 and JCE 1.5.7.14 <a rel="nofollow" class="external text" href="http://www.joomlacontenteditor.net/news/item/jce-2011-released">have been released</a> </td></tr> <tr> <td style="background:#cef2e0; color:black"> http://docs.joomla.org/Vulnerable_Extensions_List#Google_Website_Optimizer http://docs.joomla.org/Vulnerable_Extensions_List#Google_Website_Optimizer </td> <td>Numerous vulnerabilities. Website Optimizer, Pearl Group </td> <td>290811 </td> <td>developer update <a rel="nofollow" class="external text" href="http://www.pearl-group.com/optimizer-changelog">statement to ver. 1.4.0</a> </td></tr> <tr> <td style="background:#cef2e0; color:black"> http://docs.joomla.org/Vulnerable_Extensions_List#Almond_Classifieds http://docs.joomla.org/Vulnerable_Extensions_List#Almond_Classifieds </td> <td>777 Folder settings (all folders it uses are set to 777 including previously 755 locked folders) </td> <td>260811 </td> <td>developer resolution <a rel="nofollow" class="external text" href="http://www.almondsoft.com/acj/">notice</a> </td></tr> <tr> <td style="background:#cef2e0; color:black"> http://docs.joomla.org/Vulnerable_Extensions_List#joomtouch http://docs.joomla.org/Vulnerable_Extensions_List#joomtouch </td> <td>LFI/RFI </td> <td>180811 </td> <td>developers <a rel="nofollow" class="external text" href="http://www.joomtouch.com/ultime/4-risolta-la-vulnerabilita-di-joomtouch.html">resolution notice 1.0.3</a> </td></tr> <tr> <td style="background:#cef2e0; color:black"> http://docs.joomla.org/Vulnerable_Extensions_List#RAXO_All-mode_PRO http://docs.joomla.org/Vulnerable_Extensions_List#RAXO_All-mode_PRO </td> <td>Timthumb RFI </td> <td>110811 </td> <td><a rel="nofollow" class="external text" href="http://raxo.org/forum/viewtopic.php?f=2&amp;t=60#p2056">developer upgrade 1.5.0 statement</a> </td></tr> <tr> <td style="background:#cef2e0; color:black"> http://docs.joomla.org/Vulnerable_Extensions_List#V-portfolio http://docs.joomla.org/Vulnerable_Extensions_List#V-portfolio </td> <td>DT - open folders </td> <td>110811 </td> <td> <a rel="nofollow" class="external text" href="http://vsmart-extensions.com/index.php?option=com_content&amp;view=article&amp;id=61">developer resolution statement</a> </td></tr> <tr> <td style="background:#cef2e0; color:black"> http://docs.joomla.org/Vulnerable_Extensions_List#obSuggest http://docs.joomla.org/Vulnerable_Extensions_List#obSuggest </td> <td>LFI </td> <td>310711 </td> <td>developer <a rel="nofollow" class="external text" href="http://foobla.com/news/latest/obsuggest-1.8-security-release.html">release statement</a> </td></tr> <tr> <td style="background:#cef2e0; color:black"> http://docs.joomla.org/Vulnerable_Extensions_List#Simple_Page http://docs.joomla.org/Vulnerable_Extensions_List#Simple_Page </td> <td>LFI </td> <td>230711 </td> <td>developer update <a rel="nofollow" class="external text" href="http://omar84.com/latest-news/65-simple-page-options-1517-security-release">statement</a> v1.5.17 has been released </td></tr> <tr> <td style="background:#cef2e0; color:black"> http://docs.joomla.org/Vulnerable_Extensions_List#JE_Story http://docs.joomla.org/Vulnerable_Extensions_List#JE_Story </td> <td>LFI </td> <td>230711 </td> <td><a rel="nofollow" class="external text" href="http://joomlaextensions.co.in/extensions/components/je-story-submit.html">devloper security update</a> notice to ver 1.9 </td></tr> <tr> <td style="background:#cef2e0; color:black"> http://docs.joomla.org/Vulnerable_Extensions_List#appointment_booking_pro http://docs.joomla.org/Vulnerable_Extensions_List#appointment_booking_pro </td> <td>LFI 22071 </td> <td> </td> <td><a rel="nofollow" class="external text" href="http://appointmentbookingpro.com/index.php?option=com_kunena&amp;Itemid=66&amp;func=view&amp;catid=25&amp;id=8129#8129">developer update security announcement</a> Current 2.0.1 and 1.4.x versions, are <b>not</b> vulnerable, </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#acajoom http://docs.joomla.org/Vulnerable_Extensions_List#acajoom </td> <td>xss (admin permission required) </td> <td>220711 </td> <td>updated to 5.20 </td></tr> <tr> <td style="background:#cef2e0; color:black"> http://docs.joomla.org/Vulnerable_Extensions_List#gTranslate http://docs.joomla.org/Vulnerable_Extensions_List#gTranslate </td> <td>ID - </td> <td>220711 </td> <td><a rel="nofollow" class="external text" href="http://edo.webmaster.am/gtranslate-changelog">developer security release</a> 1.5 x.25 and 1.6 x.26. </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#alpharegistration http://docs.joomla.org/Vulnerable_Extensions_List#alpharegistration </td> <td><a rel="nofollow" class="external free" href="http://www.alphaplug.com/">http://www.alphaplug.com/</a> Please contact the developer for any questions on this extension </td> <td>170711 220711 </td> <td> </td></tr> <tr> <td style="background:#cef2e0; color:black"> http://docs.joomla.org/Vulnerable_Extensions_List#Jforce http://docs.joomla.org/Vulnerable_Extensions_List#Jforce </td> <td>DT - </td> <td>170711 </td> <td> <a rel="nofollow" class="external text" href="http://www.jforce.com/blog/270-jforce-security-release.html">developer states The new version number v1.5r1362 resolves the problem</a> </td></tr> <tr> <td style="background:#cef2e0; color:black"> http://docs.joomla.org/Vulnerable_Extensions_List#Flash_Magazine_Deluxe_Joomla http://docs.joomla.org/Vulnerable_Extensions_List#Flash_Magazine_Deluxe_Joomla </td> <td>ID <a rel="nofollow" class="external text" href="http://www.joomplace.com/joomla-components/flash-magazine-deluxe-component.html">multiple vulnerabilities</a> </td> <td>170711 </td> <td><a rel="nofollow" class="external text" href="http://www.joomplace.com/news-blog/flashmagazine-deluxe-2-1-4-security-release.html">developer release</a> 2.1.4 </td></tr> <tr> <td style="background:#cef2e0; color:black"> http://docs.joomla.org/Vulnerable_Extensions_List#AVreloaded http://docs.joomla.org/Vulnerable_Extensions_List#AVreloaded </td> <td>SQLi - version 1.2.6 </td> <td>150711 </td> <td><a rel="nofollow" class="external text" href="http://allvideos.fritz-elfert.de/">1.2.7 released developer release statement 160711</a> </td></tr> <tr> <td style="background:#cef2e0; color:black"> http://docs.joomla.org/Vulnerable_Extensions_List#Sobi http://docs.joomla.org/Vulnerable_Extensions_List#Sobi </td> <td>SQLI - </td> <td>130711 </td> <td><a rel="nofollow" class="external text" href="http://www.sigsiu.net/changelog">developer fix and update statement</a> </td></tr> <tr> <td style="background:#cef2e0; color:black"> http://docs.joomla.org/Vulnerable_Extensions_List#fabrik http://docs.joomla.org/Vulnerable_Extensions_List#fabrik </td> <td>sqli </td> <td>120711 </td> <td><a rel="nofollow" class="external text" href="http://fabrikar.com/downloads/details/36/89">Developers Update statement 2.1</a> </td></tr> <tr> <td> http://docs.joomla.org/Vulnerable_Extensions_List#xmap http://docs.joomla.org/Vulnerable_Extensions_List#xmap </td> <td>sqli 1.2.11 </td> <td>120711 </td> <td>upgrade to 1.2.12 </td></tr> <tr> <td style="background:#cef2e0; color:black"> http://docs.joomla.org/Vulnerable_Extensions_List#Atomic_Gallery http://docs.joomla.org/Vulnerable_Extensions_List#Atomic_Gallery </td> <td>Creates 777 folders <a rel="nofollow" class="external text" href="http://www.atomicon.nl/atomicongallery">Atomic gallery</a> </td> <td>110711 </td> <td>developer <a rel="nofollow" class="external text" href="http://www.atomicon.nl/atomicongallery#changelog">release statement/changelog</a> </td></tr> <tr> <td> http://docs.joomla.org/Vulnerable_Extensions_List#myApi http://docs.joomla.org/Vulnerable_Extensions_List#myApi </td> <td>ID <a rel="nofollow" class="external text" href="http://extensions.joomla.org/component/mtree/social-web/facebook-integration/11624">Contains "Call-Home" function. Sends private user information to developer.</a> </td> <td>020711 </td> <td><a rel="nofollow" class="external text" href="http://www.myapi.co.uk/">Developer states Use version 1.3.4.1</a> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#mdigg http://docs.joomla.org/Vulnerable_Extensions_List#mdigg </td> <td>SQL I (not listed in JED) </td> <td>020711 </td> <td> </td></tr> <tr> <td style="background:#cef2e0; color:black"> http://docs.joomla.org/Vulnerable_Extensions_List#Calc_Builder http://docs.joomla.org/Vulnerable_Extensions_List#Calc_Builder </td> <td>sqli + ID </td> <td>180611 </td> <td> <a rel="nofollow" class="external text" href="http://components.moonsoft.es/downloadcalcbuilder">dev security release 0.0.2</a> </td></tr> <tr> <td style="background:#cef2e0; color:black"> http://docs.joomla.org/Vulnerable_Extensions_List#Cool_Debate http://docs.joomla.org/Vulnerable_Extensions_List#Cool_Debate </td> <td>Cool Debate 1.03 LFI </td> <td> </td> <td> version <a rel="nofollow" class="external text" href="http://www.acoolsip.com/development/a-cool-debate.html">1.0.8 released.</a> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#_2 http://docs.joomla.org/Vulnerable_Extensions_List#_2 </td> <td> </td> <td> </td> <td> </td></tr> <tr> <td style="background:#cef2e0; color:black"> http://docs.joomla.org/Vulnerable_Extensions_List#Scriptegrator_Plugin_1.5.5 http://docs.joomla.org/Vulnerable_Extensions_List#Scriptegrator_Plugin_1.5.5 </td> <td>LFI </td> <td>140611 </td> <td> <a rel="nofollow" class="external text" href="http://www.greatjoomla.com/news/index.html">Update - Core Design Scriptegrator plugin 2.0.9 &amp;</a> 1.5.6 </td></tr> <tr> <td style="background:#cef2e0; color:black"> http://docs.joomla.org/Vulnerable_Extensions_List#Joomnik_Gallery http://docs.joomla.org/Vulnerable_Extensions_List#Joomnik_Gallery </td> <td>SQLi </td> <td> </td> <td><a rel="nofollow" class="external text" href="http://joomlacode.org/gf/project/joomnik/">developer update to 0.9.1</a> </td></tr> <tr> <td style="background:#cef2e0; color:black"> http://docs.joomla.org/Vulnerable_Extensions_List#JMS_fileseller http://docs.joomla.org/Vulnerable_Extensions_List#JMS_fileseller </td> <td>LFI </td> <td>0611 </td> <td><a rel="nofollow" class="external text" href="http://joommasters.com/commercial-extensions/components/jms-fileseller.html">developer upgrade announcement to v1.1</a> </td></tr> <tr> <td style="background:#cef2e0; color:black"> http://docs.joomla.org/Vulnerable_Extensions_List#sh404SEF http://docs.joomla.org/Vulnerable_Extensions_List#sh404SEF </td> <td>low-level XSS security issue </td> <td>300511 </td> <td><a rel="nofollow" class="external text" href="http://dev.anything-digital.com/Forum/Announcements/11147-sh404SEF-2.2.6-now-available-for-Joomla-1.5/">Dev upgrade statement to 2.2.6</a> </td></tr> <tr> <td style="background:#cef2e0; color:black"> http://docs.joomla.org/Vulnerable_Extensions_List#JE_Story_submit http://docs.joomla.org/Vulnerable_Extensions_List#JE_Story_submit </td> <td>LFI/RFI </td> <td> </td> <td><a rel="nofollow" class="external text" href="http://joomlaextensions.co.in/extensions/modules/je-content-menu.html?page=shop.product_details&amp;flypage=flypage.tpl&amp;product_id=77&amp;category_id=13&amp;vmcchk=1">developer states Version 1.8</a> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#FCKeditor http://docs.joomla.org/Vulnerable_Extensions_List#FCKeditor </td> <td>File Upload Vulnerability </td> <td>230511 </td> <td> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#KeyCaptcha http://docs.joomla.org/Vulnerable_Extensions_List#KeyCaptcha </td> <td>ID </td> <td>190511 </td> <td> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#Ask_A_Question_AddOn_v1.1 http://docs.joomla.org/Vulnerable_Extensions_List#Ask_A_Question_AddOn_v1.1 </td> <td>SQLi </td> <td>160511 </td> <td> </td></tr> <tr> <td style="background:#cef2e0; color:black"> http://docs.joomla.org/Vulnerable_Extensions_List#Global_Flash_Gallery http://docs.joomla.org/Vulnerable_Extensions_List#Global_Flash_Gallery </td> <td>flash-gallery.com xss </td> <td>130511 </td> <td><a rel="nofollow" class="external text" href="http://flash-gallery.com/help/joomla-extension/faq/security-update-0.5.0/">dev release 0.5.0 statement</a> </td></tr> <tr> <td style="background:#cef2e0; color:black"> http://docs.joomla.org/Vulnerable_Extensions_List#com_google http://docs.joomla.org/Vulnerable_Extensions_List#com_google </td> <td>LFI <a rel="nofollow" class="external text" href="http://freejoomlacomponent.appspot.com/">com_google</a> </td> <td>080511 </td> <td><a rel="nofollow" class="external text" href="http://freejoomlacomponent.appspot.com/securityrelease.html">devs update to 1.5.1</a> </td></tr> <tr> <td style="background:#cef2e0; color:black"> http://docs.joomla.org/Vulnerable_Extensions_List#docman http://docs.joomla.org/Vulnerable_Extensions_List#docman </td> <td>com-docman Input Validation Error </td> <td>160511 </td> <td><a rel="nofollow" class="external text" href="http://forum.joomla.org/viewtopic.php?p=2502904#p2502904">devs resolution statement, report for old version</a> </td></tr> <tr> <td style="background:#cef2e0; color:black"> http://docs.joomla.org/Vulnerable_Extensions_List#Newsletter_Subscriber http://docs.joomla.org/Vulnerable_Extensions_List#Newsletter_Subscriber </td> <td>XSS </td> <td>120511 </td> <td><a rel="nofollow" class="external text" href="http://mavrosxristoforos.com/joomla-extensions/free/newsletter-subscriber">Deveopler update</a> </td></tr> <tr> <td style="background:#cef2e0; color:black"> http://docs.joomla.org/Vulnerable_Extensions_List#Akeeba http://docs.joomla.org/Vulnerable_Extensions_List#Akeeba </td> <td>akkeba backup and joomlapack </td> <td>170411 </td> <td><a rel="nofollow" class="external text" href="https://www.akeebabackup.com/home/item/1091-akeeba-backup-3-2-7.html">dev update to 3.2.7</a> </td></tr> <tr> <td style="background:#cef2e0; color:black"> http://docs.joomla.org/Vulnerable_Extensions_List#Facebook_Graph_Connect http://docs.joomla.org/Vulnerable_Extensions_List#Facebook_Graph_Connect </td> <td>SID. call home device with user credentials </td> <td>120411 </td> <td><a rel="nofollow" class="external text" href="http://www.sikkimonline.info/security-notice">dev update notice</a> </td></tr> <tr> <td style="background:#cef2e0; color:black"> http://docs.joomla.org/Vulnerable_Extensions_List#booklibrary http://docs.joomla.org/Vulnerable_Extensions_List#booklibrary </td> <td>SQLi ordasoft booklibrary </td> <td>180311 </td> <td><a rel="nofollow" class="external text" href="http://ordasoft.com/Book-Library/security-upgrade-instructions-for-book-library.html">developer upgrade instructions</a> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#semantic http://docs.joomla.org/Vulnerable_Extensions_List#semantic </td> <td>com semantic <a rel="nofollow" class="external free" href="http://www.scms.es/joomla">http://www.scms.es/joomla</a> creates hidden admin users </td> <td>150311 </td> <td> </td></tr> <tr> <td> http://docs.joomla.org/Vulnerable_Extensions_List#JOMSOCIAL_2.0.x_2.1.x http://docs.joomla.org/Vulnerable_Extensions_List#JOMSOCIAL_2.0.x_2.1.x </td> <td>SID, open folders </td> <td>120311 </td> <td> </td></tr> <tr> <td style="background:#cef2e0; color:black"> http://docs.joomla.org/Vulnerable_Extensions_List#flexicontent http://docs.joomla.org/Vulnerable_Extensions_List#flexicontent </td> <td>forced 777, malicious files </td> <td>250311 </td> <td><a rel="nofollow" class="external text" href="http://www.flexicontent.org/home/item/192-flexicontent-154-is-finally-out.html">devs resolve statement</a>, <a rel="nofollow" class="external text" href="http://www.flexicontent.org/downloads/latest-version.html">Changelog</a> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#jLabs_Google_Analytics_Counter http://docs.joomla.org/Vulnerable_Extensions_List#jLabs_Google_Analytics_Counter </td> <td>jLabs Google Analytics Counter SID </td> <td> </td> <td> </td></tr> <tr> <td> http://docs.joomla.org/Vulnerable_Extensions_List#xcloner http://docs.joomla.org/Vulnerable_Extensions_List#xcloner </td> <td>Unspecified </td> <td>260211 </td> <td><a rel="nofollow" class="external text" href="http://www.xcloner.com/xcloner-news/important-security-upgrade/">dev announcement of security release</a> </td></tr> <tr> <td style="background:#cef2e0; color:black"> http://docs.joomla.org/Vulnerable_Extensions_List#smartformer http://docs.joomla.org/Vulnerable_Extensions_List#smartformer </td> <td>RFI </td> <td>230211 (repeat of 041110) </td> <td><a rel="nofollow" class="external text" href="http://www.itoris.com/joomla-form-builder-smartformer.html">v2.4.1 security fix for Joomla 1.5.x</a> </td></tr> <tr> <td style="background:#cef2e0; color:black"> http://docs.joomla.org/Vulnerable_Extensions_List#xmap_1.2.10 http://docs.joomla.org/Vulnerable_Extensions_List#xmap_1.2.10 </td> <td>Malicious payload in zip </td> <td>230211 </td> <td><a rel="nofollow" class="external text" href="http://joomla.vargas.co.cr/en/news/4-xmap/95-security-notice">developer resolution notic</a>e Clean version available from <a rel="nofollow" class="external text" href="http://joomlacode.org/gf/project/xmap/frs/">joomlacode</a> </td></tr> <tr> <td style="background:#cef2e0; color:black"> http://docs.joomla.org/Vulnerable_Extensions_List#Frontend-User-Access_3.4.1 http://docs.joomla.org/Vulnerable_Extensions_List#Frontend-User-Access_3.4.1 </td> <td>Frontend-User-Access 3.4.1 from <a rel="nofollow" class="external free" href="http://www.pages-and-items.com">http://www.pages-and-items.com</a> LFI </td> <td>030211 </td> <td>update to <a rel="nofollow" class="external text" href="http://extensions.joomla.org/extensions/access-a-security/frontend-access-control/6874">Frontend-User-Access 3.4.2</a> </td></tr> <tr> <td style="background:#cef2e0; color:black"> http://docs.joomla.org/Vulnerable_Extensions_List#com_properties_7134 http://docs.joomla.org/Vulnerable_Extensions_List#com_properties_7134 </td> <td> <a rel="nofollow" class="external free" href="http://com-property.com/">http://com-property.com/</a> malicious files in script </td> <td> </td> <td><a rel="nofollow" class="external text" href="http://joomlacode.org/gf/project/property/frs/?action=FrsReleaseBrowse&amp;frs_package_id=5815">Dev update statement</a> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#B2_Portfolio http://docs.joomla.org/Vulnerable_Extensions_List#B2_Portfolio </td> <td>B2 portfolio 1.0 SQLi pulseextensions.com </td> <td>250111 </td> <td> </td></tr> <tr> <td style="background:#cef2e0; color:black"> http://docs.joomla.org/Vulnerable_Extensions_List#allcinevid http://docs.joomla.org/Vulnerable_Extensions_List#allcinevid </td> <td>SQLI <a rel="nofollow" class="external free" href="http://extensions.joomla.org/extensions/multimedia/multimedia-players/video-players-a-gallery/15367">http://extensions.joomla.org/extensions/multimedia/multimedia-players/video-players-a-gallery/15367</a> </td> <td>220111 </td> <td><a rel="nofollow" class="external text" href="http://www.joomtraders.com/our-blog/allcinevid-1.0-sql-injection.html">Developers resolution notice</a> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#People_Component http://docs.joomla.org/Vulnerable_Extensions_List#People_Component </td> <td>People component <a rel="nofollow" class="external free" href="http://www.ptt-solution.com/vmchk/people-component.html">http://www.ptt-solution.com/vmchk/people-component.html</a> sqli </td> <td>150111 </td> <td> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#Jimtawl http://docs.joomla.org/Vulnerable_Extensions_List#Jimtawl </td> <td>Jimtawl LFI </td> <td>251110 </td> <td> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#Maian_Media_SILVER http://docs.joomla.org/Vulnerable_Extensions_List#Maian_Media_SILVER </td> <td>Maian Media SQLi </td> <td>151110 </td> <td>Developer states unproven in free edition, paid/SILVER version is being upgraded. <a rel="nofollow" class="external text" href="http://www.aretimes.com/index.php?option=com_content&amp;view=category&amp;layout=blog&amp;id=40&amp;Itemid=113">dev article</a> </td></tr> <tr> <td style="background:#cef2e0; color:black"> http://docs.joomla.org/Vulnerable_Extensions_List#alfurqan http://docs.joomla.org/Vulnerable_Extensions_List#alfurqan </td> <td>alfurqan 1.5 sqli </td> <td>151110 </td> <td>developer update <a rel="nofollow" class="external text" href="http://forums.islamis4u.com/index.php/topic%2c83.0.html">statement</a> </td></tr> <tr> <td style="background:#cef2e0; color:black"> http://docs.joomla.org/Vulnerable_Extensions_List#ccboard http://docs.joomla.org/Vulnerable_Extensions_List#ccboard </td> <td><a rel="nofollow" class="external text" href="http://extensions.joomla.org/extensions/communication/forum/6823">ccboard XSS and SQLi</a> </td> <td>131110 </td> <td> on my site at <a rel="nofollow" class="external autonumber" href="http://codeclassic.org/component/content/article/1-latest-news/83-ccboard-13-released.html">[1]</a> Please find the respective update information </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#ProDesk_v_1.5 http://docs.joomla.org/Vulnerable_Extensions_List#ProDesk_v_1.5 </td> <td>LFI </td> <td>091110 </td> <td> <p><br /> </p> </td></tr> <tr> <td style="background:#cef2e0; color:black"> http://docs.joomla.org/Vulnerable_Extensions_List#sponsorwall http://docs.joomla.org/Vulnerable_Extensions_List#sponsorwall </td> <td>SQL injection pulseextensions.com </td> <td>011110 </td> <td>developer <a rel="nofollow" class="external text" href="http://demo.pulseextensions.com/sponsor-wall.html">resolution notice</a> </td></tr> <tr> <td style="background:#cef2e0; color:black"> <p><br /> </p> http://docs.joomla.org/Vulnerable_Extensions_List#Flip_wall http://docs.joomla.org/Vulnerable_Extensions_List#Flip_wall </td> <td>SQL injection pulseextensions.com </td> <td>011110 </td> <td> developer <a rel="nofollow" class="external free" href="http://demo.pulseextensions.com/flip-wall.html">http://demo.pulseextensions.com/flip-wall.html</a> update notice <a rel="nofollow" class="external text" href="http://www.example.com">link title</a> </td></tr> <tr> <td style="background:#cef2e0; color:black"> http://docs.joomla.org/Vulnerable_Extensions_List#Freestyle_FAQ_1.5.6 http://docs.joomla.org/Vulnerable_Extensions_List#Freestyle_FAQ_1.5.6 </td> <td><a rel="nofollow" class="external free" href="http://freestyle-joomla.com/fssdownloads/viewcategory/2">http://freestyle-joomla.com/fssdownloads/viewcategory/2</a> Freestyle FAQ 1.5.6 ‎SQL Injection </td> <td> </td> <td><a rel="nofollow" class="external text" href="http://freestyle-joomla.com/index.php?announceid=43">new version (1.9.0) is available which fixes</a> the security issues. </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#iJoomla_Magazine_3.0.1 http://docs.joomla.org/Vulnerable_Extensions_List#iJoomla_Magazine_3.0.1 </td> <td>iJoomla Magazine 3.0.1 RFI </td> <td>090910 </td> <td> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#Clantools http://docs.joomla.org/Vulnerable_Extensions_List#Clantools </td> <td> </td> <td><a rel="nofollow" class="external free" href="http://www.joomla-clantools.de/downloads/doc_download/7-clantools-123.html">http://www.joomla-clantools.de/downloads/doc_download/7-clantools-123.html</a> clantool sqli </td> <td>090910 </td> <td> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#jphone http://docs.joomla.org/Vulnerable_Extensions_List#jphone </td> <td>jphone LFI </td> <td>090910 </td> <td> </td></tr> <tr> <td style="background:#cef2e0; color:black"> http://docs.joomla.org/Vulnerable_Extensions_List#PicSell http://docs.joomla.org/Vulnerable_Extensions_List#PicSell </td> <td><a rel="nofollow" class="external text" href="http://vm.xmlswf.com/index.php?option=com_content&amp;view=article&amp;id=104&amp;Itemid=131Picsell">LFD, 777</a> </td> <td>020910 </td> <td>new version <a rel="nofollow" class="external text" href="http://vm.xmlswf.com/picsell">released 150312</a> version number 11 </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#Zoom_Portfolio http://docs.joomla.org/Vulnerable_Extensions_List#Zoom_Portfolio </td> <td>SID </td> <td>020910 </td> <td> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#zina http://docs.joomla.org/Vulnerable_Extensions_List#zina </td> <td><a rel="nofollow" class="external text" href="http://www.pancake.org/zina/">SQL Injection</a> </td> <td>020910 </td> <td> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#Team.27s http://docs.joomla.org/Vulnerable_Extensions_List#Team.27s </td> <td><a rel="nofollow" class="external text" href="http://www.joomlamo.com">Teams extension</a> SQL Injection </td> <td>120810 </td> <td> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#Amblog http://docs.joomla.org/Vulnerable_Extensions_List#Amblog </td> <td><a rel="nofollow" class="external text" href="http://robitbt.hu/jm/index.php?option=com_amdownloader&amp;task=showfiles&amp;pathid=8">Amblog</a> SQLi </td> <td>120810 </td> <td> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#_3 http://docs.joomla.org/Vulnerable_Extensions_List#_3 </td> <td> </td> <td> </td> <td> </td></tr> <tr> <td> http://docs.joomla.org/Vulnerable_Extensions_List#_4 http://docs.joomla.org/Vulnerable_Extensions_List#_4 </td> <td> </td> <td> </td> <td> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#wmtpic http://docs.joomla.org/Vulnerable_Extensions_List#wmtpic </td> <td>www.webmaster-tips.net various </td> <td>010710 </td> <td> <p><br /> </p> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#Jomtube http://docs.joomla.org/Vulnerable_Extensions_List#Jomtube </td> <td><a rel="nofollow" class="external free" href="http://www.jomtube.com/">http://www.jomtube.com/</a> SID </td> <td>220710 </td> <td> </td> <td> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#Rapid_Recipe http://docs.joomla.org/Vulnerable_Extensions_List#Rapid_Recipe </td> <td><a rel="nofollow" class="external free" href="http://www.rapid-source.com">http://www.rapid-source.com</a> Persistent XSS Vulnerability last known fix version 1.7.2 </td> <td>july 10,2010 </td> <td> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#Health_.26_Fitness_Stats http://docs.joomla.org/Vulnerable_Extensions_List#Health_.26_Fitness_Stats </td> <td><a rel="nofollow" class="external free" href="http://joomla-extensions.instantiate.co.uk/jcomponents/healthstats">http://joomla-extensions.instantiate.co.uk/jcomponents/healthstats</a> Persistent XSS Vulnerability july 10,2010 </td> <td> </td> <td> </td></tr> <tr> <td style="background:red; color:white"> <p><br /> </p> http://docs.joomla.org/Vulnerable_Extensions_List#staticxt http://docs.joomla.org/Vulnerable_Extensions_List#staticxt </td> <td><a rel="nofollow" class="external free" href="http://extensions.joomla.org/extensions/edition/custom-code-in-content/2184">http://extensions.joomla.org/extensions/edition/custom-code-in-content/2184</a> no version number provided </td> <td> </td> <td> <p><br /> </p> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#quickfaq http://docs.joomla.org/Vulnerable_Extensions_List#quickfaq </td> <td><a rel="nofollow" class="external free" href="http://www.schlu.net">http://www.schlu.net</a> sqli </td> <td>090710 </td> <td> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#Minify4Joomla http://docs.joomla.org/Vulnerable_Extensions_List#Minify4Joomla </td> <td><a rel="nofollow" class="external free" href="http://waltercedric.com/">http://waltercedric.com/</a> LFI and xss </td> <td>090710 </td> <td>No longer available to download </td></tr> <tr> <td style="background:#cef2e0; color:black"> http://docs.joomla.org/Vulnerable_Extensions_List#IXXO_Cart http://docs.joomla.org/Vulnerable_Extensions_List#IXXO_Cart </td> <td><a rel="nofollow" class="external free" href="http://www.php-shop-system.com/">http://www.php-shop-system.com/</a> SQLi LFI XSS Vulnerability </td> <td> </td> <td>developer resolution <a rel="nofollow" class="external text" href="http://support.ixxoglobal.com/index.php?/News/NewsItem/View/22/ixxo-cart-new-release-v41190">notice</a> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#PaymentsPlus http://docs.joomla.org/Vulnerable_Extensions_List#PaymentsPlus </td> <td><a rel="nofollow" class="external free" href="http://paymentsplus.com.au/">http://paymentsplus.com.au/</a> 2.1.5 Blind SQL Injection Vulnerability </td> <td>090710 </td> <td>current version 2.20, 2.1.5 not listed on dev site </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#ArtForms http://docs.joomla.org/Vulnerable_Extensions_List#ArtForms </td> <td><a rel="nofollow" class="external free" href="http://joomlacode.org/gf/project/jartforms/">http://joomlacode.org/gf/project/jartforms/</a> ArtForms 2.1b7.2 RC2 Multiple Remote Vulnerabilities </td> <td>090710 </td> <td> Old beta extension </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#autartimonial http://docs.joomla.org/Vulnerable_Extensions_List#autartimonial </td> <td>autartica.be Sqli Vulnerability </td> <td>060710 </td> <td> <p><br /> </p><p><br /> </p> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#eventcal_1.6.4 http://docs.joomla.org/Vulnerable_Extensions_List#eventcal_1.6.4 </td> <td><a rel="nofollow" class="external free" href="http://joomlacode.org/gf/project/eventcal/frs/">http://joomlacode.org/gf/project/eventcal/frs/</a> SQL I last update 2006-12-31 on joomlacode </td> <td>040710 </td> <td> <p><br /> </p><p><br /> </p> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#date_converter http://docs.joomla.org/Vulnerable_Extensions_List#date_converter </td> <td><a rel="nofollow" class="external free" href="http://sourceforge.net/projects/date-converter/">http://sourceforge.net/projects/date-converter/</a> sqli </td> <td>010710 </td> <td> <p><br /> </p> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#real_estate http://docs.joomla.org/Vulnerable_Extensions_List#real_estate </td> <td><a rel="nofollow" class="external free" href="http://www.opensourcetechnologies.com/demos/real-estate.html">http://www.opensourcetechnologies.com/demos/real-estate.html</a> RFI </td> <td>210610 </td> <td> <p><br /> </p> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#cinema http://docs.joomla.org/Vulnerable_Extensions_List#cinema </td> <td>SQL injection </td> <td>190610 </td> <td> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#Jreservation http://docs.joomla.org/Vulnerable_Extensions_List#Jreservation </td> <td><a rel="nofollow" class="external free" href="http://jforjoomla.com/">http://jforjoomla.com/</a> SQLi Vulnerability </td> <td>190610 </td> <td> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#joomdocs http://docs.joomla.org/Vulnerable_Extensions_List#joomdocs </td> <td><a rel="nofollow" class="external free" href="http://joomclan.com/index.php/JoomDocs/">http://joomclan.com/index.php/JoomDocs/</a> xss vulnerability </td> <td>190610 </td> <td> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#Live_Chat http://docs.joomla.org/Vulnerable_Extensions_List#Live_Chat </td> <td><a rel="nofollow" class="external free" href="http://www.joompolitan.com/livechat.html">http://www.joompolitan.com/livechat.html</a> Multiple Remote Vulnerabilities </td> <td>190610 </td> <td> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#Turtushout_0.11 http://docs.joomla.org/Vulnerable_Extensions_List#Turtushout_0.11 </td> <td> <a rel="nofollow" class="external free" href="http://www.turtus.org.ua/files?func=fileinfo&amp;id=13">http://www.turtus.org.ua/files?func=fileinfo&amp;id=13</a> SQL Injection (again) </td> <td>190610 </td> <td> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#BF_Survey_Pro_Free http://docs.joomla.org/Vulnerable_Extensions_List#BF_Survey_Pro_Free </td> <td>BF Survey Pro Free SQL Injection Exploit </td> <td>190610 </td> <td>Product marker as retired by the developer </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#MisterEstate http://docs.joomla.org/Vulnerable_Extensions_List#MisterEstate </td> <td><a rel="nofollow" class="external free" href="http://www.misterestate.com/">http://www.misterestate.com/</a> Blind SQL Injection Exploit </td> <td>190610 </td> <td> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#RSMonials http://docs.joomla.org/Vulnerable_Extensions_List#RSMonials </td> <td><a rel="nofollow" class="external free" href="http://www.rswebsols.com/downloads/category/14-download-rsmonials-all?download=23%3Adownload-rsmonials-component">http://www.rswebsols.com/downloads/category/14-download-rsmonials-all?download=23%3Adownload-rsmonials-component</a> XSS Exploit </td> <td>190610 </td> <td>Believed to be 1.5.1 version <p><br /> </p> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#Answers_v2.3beta http://docs.joomla.org/Vulnerable_Extensions_List#Answers_v2.3beta </td> <td>Multiple Vulnerabilities <a rel="nofollow" class="external free" href="http://extensions.joomla.org/extensions/communication/forum/12652">http://extensions.joomla.org/extensions/communication/forum/12652</a> </td> <td>180610 </td> <td> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#Gallery_XML_1.1 http://docs.joomla.org/Vulnerable_Extensions_List#Gallery_XML_1.1 </td> <td>Multiple Vulnerabilities <p><a rel="nofollow" class="external free" href="http://extensions.joomla.org/extensions/photos-a-images/photo-gallery/12504">http://extensions.joomla.org/extensions/photos-a-images/photo-gallery/12504</a> </p> </td> <td>180610 </td> <td> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#JFaq_1.2 http://docs.joomla.org/Vulnerable_Extensions_List#JFaq_1.2 </td> <td>JFaq 1.2 Multiple Vulnerabilities </td> <td>180610 </td> <td> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#Listbingo_1.3 http://docs.joomla.org/Vulnerable_Extensions_List#Listbingo_1.3 </td> <td>Multiple Vulnerabilities <p><a rel="nofollow" class="external free" href="http://extensions.joomla.org/extensions/ads-a-affiliates/classified-ads/12062">http://extensions.joomla.org/extensions/ads-a-affiliates/classified-ads/12062</a> </p> </td> <td>180610 </td> <td> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#Alpha_User_Points http://docs.joomla.org/Vulnerable_Extensions_List#Alpha_User_Points </td> <td>www.alphaplug.com LFI </td> <td>180610 </td> <td> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#recruitmentmanager http://docs.joomla.org/Vulnerable_Extensions_List#recruitmentmanager </td> <td><a rel="nofollow" class="external free" href="http://recruitment.focusdev.co.uk">http://recruitment.focusdev.co.uk</a> Upload Vulnerability </td> <td>130610 </td> <td> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#Info_Line_.28MT_ILine.29 http://docs.joomla.org/Vulnerable_Extensions_List#Info_Line_.28MT_ILine.29 </td> <td><a rel="nofollow" class="external free" href="http://extensions.joomla.org/extensions/news-display/news-tickers-a-scrollers/8425">http://extensions.joomla.org/extensions/news-display/news-tickers-a-scrollers/8425</a> reports of shell scripts in download file </td> <td>120610 </td> <td> <p><br /> </p> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#Ads_manager_Annonce http://docs.joomla.org/Vulnerable_Extensions_List#Ads_manager_Annonce </td> <td><a rel="nofollow" class="external free" href="http://joomla.clubnautiquemarine.fr/">http://joomla.clubnautiquemarine.fr/</a> <p>Upload Vulnerability </p> </td> <td> 05/06/10 </td> <td> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#lead_article http://docs.joomla.org/Vulnerable_Extensions_List#lead_article </td> <td><a rel="nofollow" class="external free" href="http://www.leadya.co.il/">http://www.leadya.co.il/</a> SQLi </td> <td>050610 </td> <td> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#djartgallery http://docs.joomla.org/Vulnerable_Extensions_List#djartgallery </td> <td><a rel="nofollow" class="external free" href="http://www.design-joomla.eu">http://www.design-joomla.eu</a> Multiple Vul </td> <td>05/06/10 </td> <td> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#Gallery_2_Bridge http://docs.joomla.org/Vulnerable_Extensions_List#Gallery_2_Bridge </td> <td><a rel="nofollow" class="external text" href="http://trac.4theweb.nl/g2bridge">g2bridge</a> LFI vulnerability </td> <td> </td> <td> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#jsjobs http://docs.joomla.org/Vulnerable_Extensions_List#jsjobs </td> <td><a rel="nofollow" class="external text" href="http://www.joomsky.com">jsjobs</a> SQL Injection Vulnerability </td> <td> </td> <td> </td></tr> <tr> <td> http://docs.joomla.org/Vulnerable_Extensions_List#_5 http://docs.joomla.org/Vulnerable_Extensions_List#_5 </td> <td> </td> <td> </td> <td> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#JE_Poll http://docs.joomla.org/Vulnerable_Extensions_List#JE_Poll </td> <td><a rel="nofollow" class="external free" href="http://slideshow.joomlaextensions.co.in/">http://slideshow.joomlaextensions.co.in/</a> SQL Injection Vulnerability </td> <td> </td> <td> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#MediQnA http://docs.joomla.org/Vulnerable_Extensions_List#MediQnA </td> <td>MediQnA LFI vulnerability version&#160;: v1.1 </td> <td> </td> <td> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#JE_Job http://docs.joomla.org/Vulnerable_Extensions_List#JE_Job </td> <td><a rel="nofollow" class="external free" href="http://joomlaextensions.co.in/">http://joomlaextensions.co.in/</a> LFI SQLi </td> <td> </td> <td> </td></tr> <tr> <td> http://docs.joomla.org/Vulnerable_Extensions_List#_6 http://docs.joomla.org/Vulnerable_Extensions_List#_6 </td> <td> </td> <td> </td> <td> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#SectionEx http://docs.joomla.org/Vulnerable_Extensions_List#SectionEx </td> <td>Stack Ideas section Ex LFI </td> <td> </td> <td> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#ActiveHelper_LiveHelp http://docs.joomla.org/Vulnerable_Extensions_List#ActiveHelper_LiveHelp </td> <td>XSS in <a rel="nofollow" class="external text" href="http://extensions.joomla.org/extensions/communication/chat/12492">LiveHelp</a> </td> <td>200510 </td> <td> </td></tr> <tr> <td style="background:#cef2e0; color:black"> http://docs.joomla.org/Vulnerable_Extensions_List#JE_Quotation_Form http://docs.joomla.org/Vulnerable_Extensions_List#JE_Quotation_Form </td> <td><a rel="nofollow" class="external free" href="http://joomlaextensions.co.in/free-download/doc_download/11-je-quotation-form.html">http://joomlaextensions.co.in/free-download/doc_download/11-je-quotation-form.html</a> LFI </td> <td> </td> <td>developers statement of <a rel="nofollow" class="external text" href="http://joomlaextensions.co.in/extensions/joomla-components/product/JE-Quote-Form">resolution</a> <b>note</b>, now known as <a rel="nofollow" class="external text" href="http://joomlaextensions.co.in/extensions/joomla-components/product/JE-Quote-Form">JE Quote Form</a> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#konsultasi http://docs.joomla.org/Vulnerable_Extensions_List#konsultasi </td> <td>SQL Injection Vulnerability </td> <td> </td> <td> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#Seber_Cart http://docs.joomla.org/Vulnerable_Extensions_List#Seber_Cart </td> <td>Local File Disclosure Vulnerability </td> <td> </td> <td><a rel="nofollow" class="external text" href="http://www.sebercart.com/index.php?option=com_content&amp;view=article&amp;id=158">Developer Update 140510</a> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#Camp26_Visitor http://docs.joomla.org/Vulnerable_Extensions_List#Camp26_Visitor </td> <td>RFI www.camp26.biz </td> <td> </td> <td> <p><br /> </p> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#JE_Property http://docs.joomla.org/Vulnerable_Extensions_List#JE_Property </td> <td>JE Property Finder Upload Vulnerability </td> <td> </td> <td> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#Noticeboard http://docs.joomla.org/Vulnerable_Extensions_List#Noticeboard </td> <td>Noticeboard for Joomla "controller" Local File Inclusion Vulnerability </td> <td> </td> <td> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#SmartSite http://docs.joomla.org/Vulnerable_Extensions_List#SmartSite </td> <td>SmartSite com_smartsite Local File Inclusion Vulnerability </td> <td> </td> <td> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#htmlcoderhelper_graphics http://docs.joomla.org/Vulnerable_Extensions_List#htmlcoderhelper_graphics </td> <td>htmlcoderhelper graphics v1.0.6 LFI Vulnerability </td> <td> </td> <td> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#Ultimate_Portfolio http://docs.joomla.org/Vulnerable_Extensions_List#Ultimate_Portfolio </td> <td>Ultimate Portfolio Local File Inclusion Vulnerability </td> <td> </td> <td> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#Archery_Scores http://docs.joomla.org/Vulnerable_Extensions_List#Archery_Scores </td> <td> <a rel="nofollow" class="external text" href="http://lispeltuut.org/">Archery Scores (com_archeryscores) v1.0.6 LFI Vulnerability</a> </td> <td>210410 </td> <td> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#ZiMB_Manager http://docs.joomla.org/Vulnerable_Extensions_List#ZiMB_Manager </td> <td>Joomla Component ZiMB Manager Local File Inclusion Vulnerability </td> <td>210410 </td> <td> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#Matamko http://docs.joomla.org/Vulnerable_Extensions_List#Matamko </td> <td>Matamko Local File Inclusion Vulnerability </td> <td>210410 </td> <td> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#Multiple_Root http://docs.joomla.org/Vulnerable_Extensions_List#Multiple_Root </td> <td>Multiple Root Local File Inclusion Vulnerability <a rel="nofollow" class="external free" href="http://joomlacomponent.inetlanka.com/">http://joomlacomponent.inetlanka.com/</a> </td> <td> </td> <td> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#Multiple_Map http://docs.joomla.org/Vulnerable_Extensions_List#Multiple_Map </td> <td>Multiple Map Local File Inclusion Vulnerability joomlacomponent.inetlanka.com </td> <td> </td> <td> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#Contact_Us_Draw_Root_Map http://docs.joomla.org/Vulnerable_Extensions_List#Contact_Us_Draw_Root_Map </td> <td>Draw Root Map Local File Inclusion Vulnerability joomlacomponent.inetlanka.com </td> <td> </td> <td> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#iF_surfALERT http://docs.joomla.org/Vulnerable_Extensions_List#iF_surfALERT </td> <td><a rel="nofollow" class="external text" href="http://www.inertialfate.za.net/">iF surfALERT</a> Local File Inclusion Vulnerability </td> <td> </td> <td> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#GBU_FACEBOOK http://docs.joomla.org/Vulnerable_Extensions_List#GBU_FACEBOOK </td> <td>GBU FACEBOOK SQL injection vulnerability <a rel="nofollow" class="external free" href="http://www.gbugrafici.nl/gbufacebook/">http://www.gbugrafici.nl/gbufacebook/</a> </td> <td> </td> <td> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#jnewspaper http://docs.joomla.org/Vulnerable_Extensions_List#jnewspaper </td> <td>jnewspaper (cid) SQL Injection Vulnerability </td> <td> </td> <td> <p><br /> </p><p><br /> </p> </td></tr> <tr> <td> http://docs.joomla.org/Vulnerable_Extensions_List#_7 http://docs.joomla.org/Vulnerable_Extensions_List#_7 </td> <td> </td> <td> </td> <td> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#MT_Fire_Eagle http://docs.joomla.org/Vulnerable_Extensions_List#MT_Fire_Eagle </td> <td>LFI <a rel="nofollow" class="external free" href="http://joomlacode.org/gf/project/jfireeagle/frs/">http://joomlacode.org/gf/project/jfireeagle/frs/</a> <a rel="nofollow" class="external free" href="http://www.moto-treks.com">http://www.moto-treks.com</a> </td> <td> 190410 </td> <td> product considered retired and to be replaced by dev </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#Sweetykeeper http://docs.joomla.org/Vulnerable_Extensions_List#Sweetykeeper </td> <td>Sweetykeeper Local File Inclusion Vulnerability <a rel="nofollow" class="external free" href="http://www.joomlacorner.com/">http://www.joomlacorner.com/</a> </td> <td>120410 </td> <td> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#jvehicles http://docs.joomla.org/Vulnerable_Extensions_List#jvehicles </td> <td>SQL Injection <a rel="nofollow" class="external free" href="http://jvehicles.com">http://jvehicles.com</a> </td> <td>120410 </td> <td> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#worldrates http://docs.joomla.org/Vulnerable_Extensions_List#worldrates </td> <td><a rel="nofollow" class="external free" href="http://dev.pucit.edu.pk/">http://dev.pucit.edu.pk/</a> </td> <td>120410 </td> <td> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#cvmaker http://docs.joomla.org/Vulnerable_Extensions_List#cvmaker </td> <td><a rel="nofollow" class="external free" href="http://dev.pucit.edu.pk/">http://dev.pucit.edu.pk/</a> </td> <td> </td> <td> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#advertising http://docs.joomla.org/Vulnerable_Extensions_List#advertising </td> <td><a rel="nofollow" class="external free" href="http://dev.pucit.edu.pk/">http://dev.pucit.edu.pk/</a> </td> <td> </td> <td> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#horoscope http://docs.joomla.org/Vulnerable_Extensions_List#horoscope </td> <td><a rel="nofollow" class="external free" href="http://dev.pucit.edu.pk/">http://dev.pucit.edu.pk/</a> </td> <td>120410 </td> <td> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#webtv http://docs.joomla.org/Vulnerable_Extensions_List#webtv </td> <td><a rel="nofollow" class="external free" href="http://dev.pucit.edu.pk/">http://dev.pucit.edu.pk/</a> </td> <td>120410 </td> <td> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#diary http://docs.joomla.org/Vulnerable_Extensions_List#diary </td> <td><a rel="nofollow" class="external free" href="http://dev.pucit.edu.pk/">http://dev.pucit.edu.pk/</a> </td> <td>120410 </td> <td> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#Memory_Book http://docs.joomla.org/Vulnerable_Extensions_List#Memory_Book </td> <td><a rel="nofollow" class="external free" href="http://dev.pucit.edu.pk/">http://dev.pucit.edu.pk/</a> </td> <td>120410 </td> <td> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#JprojectMan http://docs.joomla.org/Vulnerable_Extensions_List#JprojectMan </td> <td>LFI <a rel="nofollow" class="external free" href="http://extensions.joomla.org/extensions/communities-a-groupware/project-a-task-management/5676">http://extensions.joomla.org/extensions/communities-a-groupware/project-a-task-management/5676</a> </td> <td>110410 </td> <td> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#econtentsite http://docs.joomla.org/Vulnerable_Extensions_List#econtentsite </td> <td>LFI </td> <td>040410 </td> <td> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#Jvehicles_2 http://docs.joomla.org/Vulnerable_Extensions_List#Jvehicles_2 </td> <td>ID </td> <td>040410 </td> <td> </td></tr> <tr> <td> http://docs.joomla.org/Vulnerable_Extensions_List#_8 http://docs.joomla.org/Vulnerable_Extensions_List#_8 </td> <td> </td> <td> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#gigcalender http://docs.joomla.org/Vulnerable_Extensions_List#gigcalender </td> <td>SQLi <a rel="nofollow" class="external text" href="http://extensions.joomla.org/extensions/calendars-a-events/events/97)http://extensions.joomla.org/extensions/calendars-a-events/events/97">gigcalender</a> </td> <td>13 march 2010 </td> <td> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#heza_content http://docs.joomla.org/Vulnerable_Extensions_List#heza_content </td> <td>SQLi <a rel="nofollow" class="external text" href="http://extensions.joomla.org/extensions/structure-a-navigation/sections-a-categories/10427)http://extensions.joomla.org/extensions/structure-a-navigation/sections-a-categories/10427">heza content</a> </td> <td>13 march 2010 </td> <td> <p><br /> </p> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#SqlReport http://docs.joomla.org/Vulnerable_Extensions_List#SqlReport </td> <td>Sqlreport has a sql/RFI exploit. awaiting confirmation on exact developer. </td> <td>Feb 20 </td> <td><b>Not Known</b> </td></tr> <tr> <td style="background:red; color:white"> http://docs.joomla.org/Vulnerable_Extensions_List#Yelp http://docs.joomla.org/Vulnerable_Extensions_List#Yelp </td> <td> SQLi - Unable to locate developer. Possibly a custom extension. </td> <td>Feb 01 </td> <td style="background:red; color:white"> <b> Not Known</b> </td></tr> <tr> <td> http://docs.joomla.org/Vulnerable_Extensions_List#_9 http://docs.joomla.org/Vulnerable_Extensions_List#_9 </td> <td> </td> <td> </td> <td> </td></tr></table>