Search
Search Results (25 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-65890 | 2 Balbooa, Balbooa.com | 2 Gridbox, Gridbox Extension For Joomla | 2026-07-29 | 9.8 Critical |
| Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.2 - Multiple SQLi vectors allow unauthenticated actors to inject SQL in queries. | ||||
| CVE-2026-65885 | 2 Balbooa, Balbooa.com | 2 Gridbox, Gridbox Extension For Joomla | 2026-07-29 | 8.8 High |
| Joomla Extension - balbooa.com - Authenticated arbitrary file upload in Gridbox < 2.20.2 - File upload methods allows authenticated attackers to upload arbitrary files. Turns into an authenticated RCE if combined with CVE-2026-65884 as the required account can be created by the attacker. | ||||
| CVE-2026-65884 | 2 Balbooa, Balbooa.com | 2 Gridbox, Gridbox Extension For Joomla | 2026-07-29 | 9.8 Critical |
| Joomla Extension - balbooa.com - Privilege Escalation in Gridbox < 2.20.2 - The registration method allows users provided usergroup IDs, allowing unauthenticated actors to register new accounts with administrative permissions. | ||||
| CVE-2026-61425 | 1 Balbooa.com | 1 Gridbox Extension For Joomla | 2026-07-23 | N/A |
| Joomla Extension - balbooa.com - Authentication bypass in Gridbox < 1.6.0 - The Joomla extension Gridbox is vulnerable an authenticated bypass, potentially leading to full admin access. | ||||
| CVE-2026-56291 | 2 Balbooa, Balbooa.com | 2 Forms, Balbooa.com Balbooa Forms Extension For Joomla | 2026-07-23 | 9.8 Critical |
| Joomla Extension - balbooa.com - Unauthenticated file upload in Balbooa Forms extension < 2.4.1 - The Joomla extension Balbooa Forms is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files and leads to full RCE. | ||||