Balbooa kayıtları
balbooa üreticisine ait 18 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 1 · %5,6
- Silahlaştırılmış
- 1 · %5,6
- Pre-auth RCE
- 2
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- 1 gün
Tekrar eden sınıflar
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')4
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-284 Improper Access Control3
- CWE-434 Unrestricted Upload of File with Dangerous Type2
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
18 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
74Bu hafta | CVE-2026-56291Silahlaştırılmış | Joomla Extension - balbooa.com - Unauthenticated file upload in Balbooa Forms extension < 2.4.1balbooa · forms · CWE-434 | Kritik10,0 | KEV | %14,8 | 9 Tem 2026 |
40Planlayın | CVE-2026-65887İstismar yok | Joomla Extension - balbooa.com - Unauthenticated arbitrary password reset in Gridbox < 2.20.2balbooa · gridbox · CWE-284 | Kritik10,0 | — | %0,5 | 29 Tem 2026 |
40Planlayın | CVE-2026-65884İstismar yok | Joomla Extension - balbooa.com - Privilege Escalation in Gridbox < 2.20.2balbooa · gridbox · CWE-284 | Kritik10,0 | — | %0,5 | 29 Tem 2026 |
40Planlayın | CVE-2026-65888İstismar yok | Joomla Extension - balbooa.com - Account takeover vulnerability in Gridbox < 2.20.2balbooa · gridbox · CWE-284 | Kritik10,0 | — | %0,5 | 29 Tem 2026 |
38İzleyin | CVE-2026-102425Kavram kanıtı | Joomla Extension - balbooa.com - Unauthenticated RCE via field shortcode injection in Balbooa Forms < 2.4.3.4balbooa · forms · CWE-94 | Kritik9,5 | — | %0,5 | 29 Eyl 2026 |
37İzleyin | CVE-2026-65885İstismar yok | Joomla Extension - balbooa.com - Authenticated arbitrary file upload in Gridbox < 2.20.2balbooa · gridbox · CWE-434 | Kritik9,4 | — | %0,5 | 29 Tem 2026 |
36İzleyin | CVE-2026-65886İstismar yok | Joomla Extension - balbooa.com - Unauthenticated arbitrary file read in Gridbox < 2.20.2balbooa · gridbox · CWE-22 | Kritik9,2 | — | %0,5 | 29 Tem 2026 |
36İzleyin | CVE-2026-65890İstismar yok | Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.2balbooa · gridbox · CWE-89 | Kritik9,2 | — | %0,5 | 29 Tem 2026 |
36İzleyin | CVE-2026-65889İstismar yok | Joomla Extension - balbooa.com - Unauthenticated recursive directory deletion in Gridbox < 2.20.2balbooa · gridbox · CWE-22 | Kritik9,2 | — | %0,4 | 29 Tem 2026 |
35İzleyin | CVE-2026-102424İstismar yok | Joomla Extension - balbooa.com - Unauthenticated path traversal exfiltrates local files through auto-reply attachments in Balbooa Forms < 2.4.3.4balbooa · forms · CWE-22 | Yüksek8,9 | — | %0,3 | 29 Eyl 2026 |
34İzleyin | CVE-2018-11690İstismar yok | The Balbooa Gridbox extension version 2.4.0 and previous versions for Joomla! is vulnerable to cross-site scripting, caused by improper valibalbooa · gridbox · CWE-79 | Orta6,1 | — | %32,9 | 14 Haz 2018 |
34İzleyin | CVE-2026-101127İstismar yok | Joomla Extension - balbooa.com - Unauthenticated upload filename stored XSS in Balbooa Forms < 2.4.3.4balbooa · forms · CWE-79 | Yüksek8,6 | — | %0,3 | 29 Eyl 2026 |
29İzleyin | CVE-2026-65947İstismar yok | Joomla Extension - balbooa.com - Various CSRF vectors in the admin interface in Gridbox < 2.20.2balbooa · gridbox · CWE-352 | Yüksek7,3 | — | %0,1 | 29 Tem 2026 |
27İzleyin | CVE-2026-101126İstismar yok | Joomla Extension - balbooa.com - File meta data tampering in Balbooa Forms < 2.4.3.4balbooa · forms · CWE-22 | Orta6,9 | — | %0,2 | 29 Eyl 2026 |
27İzleyin | CVE-2026-101112İstismar yok | Joomla Extension - balbooa.com - Unauthorized Deletion of Attachments in Balbooa Forms < 2.4.3.4balbooa · forms · CWE-639 | Orta6,9 | — | %0,2 | 29 Eyl 2026 |
24İzleyin | CVE-2026-66490İstismar yok | Joomla Extension - balbooa.com - Stored cross-site scripting via a comment avatar in Gridbox < 2.20.2balbooa · gridbox · CWE-79 | Orta6,1 | — | %0,2 | 29 Tem 2026 |
21İzleyin | CVE-2026-66489İstismar yok | Joomla Extension - balbooa.com - Various unauthenticated file system disclosure in Gridbox < 2.20.2balbooa · gridbox · CWE-200 | Orta5,3 | — | %0,3 | 29 Tem 2026 |
21İzleyin | CVE-2026-66488İstismar yok | Joomla Extension - balbooa.com - Payment bypass in Gridbox < 2.20.2balbooa · gridbox · CWE-285 | Orta5,3 | — | %0,3 | 29 Tem 2026 |
- CVE-2026-5629174Bu hafta
Joomla Extension - balbooa.com - Unauthenticated file upload in Balbooa Forms extension < 2.4.1
KritikCVSS 10,0KEVSilahlaştırılmışEPSS %14balbooa · forms9 Tem 2026
- CVE-2026-6588740Planlayın
Joomla Extension - balbooa.com - Unauthenticated arbitrary password reset in Gridbox < 2.20.2
KritikCVSS 10,0İstismar yokEPSS %0balbooa · gridbox29 Tem 2026
- CVE-2026-6588440Planlayın
Joomla Extension - balbooa.com - Privilege Escalation in Gridbox < 2.20.2
KritikCVSS 10,0İstismar yokEPSS %0balbooa · gridbox29 Tem 2026
- CVE-2026-6588840Planlayın
Joomla Extension - balbooa.com - Account takeover vulnerability in Gridbox < 2.20.2
KritikCVSS 10,0İstismar yokEPSS %0balbooa · gridbox29 Tem 2026
- CVE-2026-10242538İzleyin
Joomla Extension - balbooa.com - Unauthenticated RCE via field shortcode injection in Balbooa Forms < 2.4.3.4
KritikCVSS 9,5Kavram kanıtıEPSS %0balbooa · forms29 Eyl 2026
- CVE-2026-6588537İzleyin
Joomla Extension - balbooa.com - Authenticated arbitrary file upload in Gridbox < 2.20.2
KritikCVSS 9,4İstismar yokEPSS %0balbooa · gridbox29 Tem 2026
- CVE-2026-6588636İzleyin
Joomla Extension - balbooa.com - Unauthenticated arbitrary file read in Gridbox < 2.20.2
KritikCVSS 9,2İstismar yokEPSS %0balbooa · gridbox29 Tem 2026
- CVE-2026-6589036İzleyin
Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.2
KritikCVSS 9,2İstismar yokEPSS %0balbooa · gridbox29 Tem 2026
- CVE-2026-6588936İzleyin
Joomla Extension - balbooa.com - Unauthenticated recursive directory deletion in Gridbox < 2.20.2
KritikCVSS 9,2İstismar yokEPSS %0balbooa · gridbox29 Tem 2026
- CVE-2026-10242435İzleyin
Joomla Extension - balbooa.com - Unauthenticated path traversal exfiltrates local files through auto-reply attachments in Balbooa Forms < 2.4.3.4
YüksekCVSS 8,9İstismar yokEPSS %0balbooa · forms29 Eyl 2026
- CVE-2018-1169034İzleyin
The Balbooa Gridbox extension version 2.4.0 and previous versions for Joomla! is vulnerable to cross-site scripting, caused by improper vali
OrtaCVSS 6,1İstismar yokEPSS %32balbooa · gridbox14 Haz 2018
- CVE-2026-10112734İzleyin
Joomla Extension - balbooa.com - Unauthenticated upload filename stored XSS in Balbooa Forms < 2.4.3.4
YüksekCVSS 8,6İstismar yokEPSS %0balbooa · forms29 Eyl 2026
- CVE-2026-6594729İzleyin
Joomla Extension - balbooa.com - Various CSRF vectors in the admin interface in Gridbox < 2.20.2
YüksekCVSS 7,3İstismar yokEPSS %0balbooa · gridbox29 Tem 2026
- CVE-2026-10112627İzleyin
Joomla Extension - balbooa.com - File meta data tampering in Balbooa Forms < 2.4.3.4
OrtaCVSS 6,9İstismar yokEPSS %0balbooa · forms29 Eyl 2026
- CVE-2026-10111227İzleyin
Joomla Extension - balbooa.com - Unauthorized Deletion of Attachments in Balbooa Forms < 2.4.3.4
OrtaCVSS 6,9İstismar yokEPSS %0balbooa · forms29 Eyl 2026
- CVE-2026-6649024İzleyin
Joomla Extension - balbooa.com - Stored cross-site scripting via a comment avatar in Gridbox < 2.20.2
OrtaCVSS 6,1İstismar yokEPSS %0balbooa · gridbox29 Tem 2026
- CVE-2026-6648921İzleyin
Joomla Extension - balbooa.com - Various unauthenticated file system disclosure in Gridbox < 2.20.2
OrtaCVSS 5,3İstismar yokEPSS %0balbooa · gridbox29 Tem 2026
- CVE-2026-6648821İzleyin
Joomla Extension - balbooa.com - Payment bypass in Gridbox < 2.20.2
OrtaCVSS 5,3İstismar yokEPSS %0balbooa · gridbox29 Tem 2026