References https://www.exploit-db.com/exploits/43358 https://github.com/0xdsm/juumla/issues/1 https://3dwebdesign.org/forum/joomla-vulnerable-extensions-list-t2298 https://extensions.joomla.org/index.php?option=com_vel&format=json
Related VulnerabilitiesPoCCVE-2026-65761: Joomla Easy Store - SQL InjectionPoCCVE-2026-57827: RSFiles! for Joomla - Arbitrary File UploadPoCCVE-2026-48939: Joomla iCagenda < 3.9.10 - Unauthenticated Arbitrary File Upload RCEPoCjoomla-com-fabrik-lfi: Joomla! com_fabrik 3.9.11 - Local File InclusionPoCCVE-2026-48907: Joomla! JCE extension < 2.9.99.5 unauthenticated RCEJoomla JCE /index.php com_jce 文件上传漏洞(CVE-2026-48907)PoCCVE-2024-13114: WP Projects Portfolio <= 3.0 - Cross-Site ScriptingERPNext /api/method/erpnext.projects.doctype.timesheet.timesheet.get_timesheet_detail_rate SQL 注入漏洞(CVE-2025-52049)PoCjoomla-fpd: Joomla! - Full Path DisclosureCode-Projects Refugee Food Management System SQL注入漏洞Code-Projects College Notes Uploading System SQL注入漏洞Code-Projects Assessment Management SQL注入漏洞