GCVE - cpe:2.3:a:joomla:joomla\!:3.7.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:joomla:joomla\!:3.7.0:*:*:*:*:*:*:*

part: a version: 3.7.0 update: *

Vendor	Joomla (`6fa59c4b-5b62-59b9-bce0-735b9b6b6c51`)
Product	Joomla! (`10fae64e-55af-54aa-88fc-fe7759e94ebb`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2017-9934`	vulnerable	2026-06-08 05:10:20.120084	Details available Missing CSRF token checks and improper input validation in Joomla! CMS 1.7.3 through 3.7.2 lead to an XSS vulnerability. Published: 2017-07-17T21:00:00.000Z Updated: 2024-08-05T17:24:59.823Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/99451 https://developer.joomla.org/security-centre/697-20170602-core-xss-vulnerability http://www.securitytracker.com/id/1038817	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-9933`	vulnerable	2026-06-08 05:10:20.105259	Details available Improper cache invalidation in Joomla! CMS 1.7.3 through 3.7.2 leads to disclosure of form contents. Published: 2017-07-17T21:00:00.000Z Updated: 2024-08-05T17:25:00.411Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/99450 http://www.securitytracker.com/id/1038817 https://developer.joomla.org/security-centre/696-20170601-core-information-disclosure	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-8917`	vulnerable	2026-06-08 05:10:09.117584	Details available SQL injection vulnerability in Joomla! 3.7.x before 3.7.1 allows attackers to execute arbitrary SQL commands via unspecified vectors. Published: 2017-05-17T23:00:00.000Z Updated: 2024-08-05T16:48:22.880Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/98515 https://developer.joomla.org/security-centre/692-20170501-core-sql-injection.html https://www.exploit-db.com/exploits/44358/ http://www.securitytracker.com/id/1038522 https://www.exploit-db.com/exploits/42033/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-14596`	vulnerable	2026-06-08 05:08:50.213986	Details available In Joomla! before 3.8.0, inadequate escaping in the LDAP authentication plugin can result in a disclosure of a username and password. Published: 2017-09-20T18:00:00.000Z Updated: 2024-08-05T19:34:39.270Z Open on db.gcve.eu Reference links https://developer.joomla.org/security-centre/711-20170902-core-ldap-information-disclosure https://blog.ripstech.com/2017/joomla-takeover-in-20-seconds-with-ldap-injection-cve-2017-14596/ http://www.securitytracker.com/id/1039407 http://www.securityfocus.com/bid/100898	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-14595`	vulnerable	2026-06-08 05:08:50.150879	Details available In Joomla! before 3.8.0, a logic bug in a SQL query could lead to the disclosure of article intro texts when these articles are in the archived state. Published: 2017-09-20T18:00:00.000Z Updated: 2024-08-05T19:34:38.649Z Open on db.gcve.eu Reference links https://developer.joomla.org/security-centre/710-20170901-core-information-disclosure http://www.securitytracker.com/id/1039407 http://www.securityfocus.com/bid/100900	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-11612`	vulnerable	2026-06-08 05:08:38.184050	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-11364`	vulnerable	2026-06-08 05:08:37.462949	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.