Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
🆕 Nuevo en 2MCI
✨ Crear cuenta gratis 🛠️ Ver herramientas sin registro
Ya tengo cuenta
🔒 Iniciar sesión
Equipo
🏠 Portal interno 2MCI
Inicio/Alertas
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada ahora mismo
Buscando: "Joomla" — 90 resultados ✕ Limpiar búsqueda
13,509
Total alertas
3066
Críticas
10171
Altas
8
Ransomware
1797
Esta semana
RSS
Vulnerabilidades × Limpiar todo ×
M Alto vulnerabilidad
19/06/2026
[CVE-2019-25748] Joomla JHotelReservation 6.0.7 contains an SQL injection vulnerability that allows unauthenticated a…
Joomla JHotelReservation 6.0.7 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the rooms parameter. Attackers can send POST requests to the search-hotels endpoint with crafted SQL payloads in the rooms parameter to extract sensitive database information including version details.
nvdaltovulnerabilidad CVSS 8.2 NVD
M Alto vulnerabilidad
19/06/2026
[CVE-2017-20270] Joomla! Component Twitch Tv 1.1 contains an SQL injection vulnerability that allows unauthenticated …
Joomla! Component Twitch Tv 1.1 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the username and id parameters. Attackers can send GET requests to index.php with option=com_twitchtv and view parameters containing SQL injection payloads to extract sensitive database information including credentials a…
nvdaltovulnerabilidad CVSS 8.2 NVD
M Alto vulnerabilidad
19/06/2026
[CVE-2017-20271] Joomla StreetGuessr Game 1.1.8 contains an SQL injection vulnerability that allows unauthenticated a…
Joomla StreetGuessr Game 1.1.8 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the catid parameter. Attackers can send GET requests to index.php with the option=com_streetguess&view=maps parameters and inject SQL code in the catid parameter to extract sensitive database information including version …
nvdaltovulnerabilidad CVSS 8.2 NVD
M Alto vulnerabilidad
19/06/2026
[CVE-2017-20272] Joomla Ultimate Property Listing 1.0.2 contains an SQL injection vulnerability that allows unauthent…
Joomla Ultimate Property Listing 1.0.2 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the sf_selectuser_id parameter. Attackers can send GET requests to index.php with the option=com_upl and view=propertylisting parameters to extract sensitive database information including table names and column st…
nvdaltovulnerabilidad CVSS 8.2 NVD
M Alto vulnerabilidad
19/06/2026
[CVE-2017-20273] Joomla Event Registration Pro Calendar 4.1.3 contains an SQL injection vulnerability that allows una…
Joomla Event Registration Pro Calendar 4.1.3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the id parameter. Attackers can send GET requests to index.php with option=com_registrationpro&view=category&id parameter containing SQL injection payloads to extract sensitive database information.
nvdaltovulnerabilidad CVSS 8.2 NVD
M Alto vulnerabilidad
19/06/2026
[CVE-2017-20274] Joomla LMS King Professional 3.2.4.0 contains an SQL injection vulnerability that allows unauthentic…
Joomla LMS King Professional 3.2.4.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the cp_id parameter. Attackers can send GET requests to index.php with the option=com_lmsking, view=lmsking, layout=learningpath, and task=learningPath parameters to extract sensitive database information.
nvdaltovulnerabilidad CVSS 8.2 NVD
M Alto vulnerabilidad
19/06/2026
[CVE-2017-20275] Joomla! Component PHP-Bridge 1.2.3 contains an SQL injection vulnerability that allows unauthenticat…
Joomla! Component PHP-Bridge 1.2.3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the id parameter. Attackers can send GET requests to index.php with option=com_phpbridge&view=phpview parameters and inject SQL code in the id parameter to extract database information including table and column names.
nvdaltovulnerabilidad CVSS 8.2 NVD

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
M Alto vulnerabilidad
19/06/2026
[CVE-2017-20276] Joomla! Component SIMGenealogy 2.1.5 contains an SQL injection vulnerability that allows unauthentic…
Joomla! Component SIMGenealogy 2.1.5 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the type parameter. Attackers can send GET requests to index.php with the option=com_simgenealogy, view=latest parameters and inject malicious SQL in the type parameter to extract sensitive database information.
nvdaltovulnerabilidad CVSS 8.2 NVD
M Alto vulnerabilidad
19/06/2026
[CVE-2017-20277] Joomla JoomRecipe 1.0.4 component contains a blind SQL injection vulnerability in the search_author …
Joomla JoomRecipe 1.0.4 component contains a blind SQL injection vulnerability in the search_author parameter on the search results page. Attackers can inject SQL code through POST requests to the search endpoint to extract database information using boolean-based blind SQL injection techniques.
nvdaltovulnerabilidad CVSS 8.2 NVD
M Alto vulnerabilidad
19/06/2026
[CVE-2017-20269] Joomla! Component KissGallery 1.0.0 contains an SQL injection vulnerability that allows unauthentica…
Joomla! Component KissGallery 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to inject SQL commands through the component URL path. Attackers can supply malicious SQL code in the kissgallery endpoint to execute arbitrary database queries and extract sensitive information.
nvdaltovulnerabilidad CVSS 8.2 NVD
M Alto vulnerabilidad
19/06/2026
[CVE-2017-20268] Joomla! Component Zap Calendar Lite 4.3.4 contains an SQL injection vulnerability that allows unauth…
Joomla! Component Zap Calendar Lite 4.3.4 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'eid' parameter. Attackers can send GET requests to the RSVP plugin endpoint with crafted SQL payloads to extract sensitive database information including database names and table structures.
nvdaltovulnerabilidad CVSS 8.2 NVD
M Alto vulnerabilidad
19/06/2026
[CVE-2017-20263] Joomla! Component FocalPoint Pro/Free 1.2.3 contains an SQL injection vulnerability that allows unau…
Joomla! Component FocalPoint Pro/Free 1.2.3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the id parameter. Attackers can send GET requests to index.php with option=com_focalpoint, view=location, and a crafted id parameter containing SQL commands to extract sensitive database information.
nvdaltovulnerabilidad CVSS 8.2 NVD
M Alto vulnerabilidad
19/06/2026
[CVE-2017-20264] Joomla! Component Sponsor Wall 8.0 contains an SQL injection vulnerability that allows unauthenticat…
Joomla! Component Sponsor Wall 8.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the wallid parameter. Attackers can send GET requests to index.php with the option=com_sponsorwall&task=click&wallid parameter containing SQL injection payloads to extract sensitive database information including crede…
nvdaltovulnerabilidad CVSS 7.1 NVD
M Alto vulnerabilidad
19/06/2026
[CVE-2017-20265] Joomla! Component Flip Wall 8.0 contains an SQL injection vulnerability that allows unauthenticated …
Joomla! Component Flip Wall 8.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the wallid parameter. Attackers can send GET requests to index.php with the option=com_flipwall&task=click&wallid parameter containing SQL injection payloads to extract sensitive database information.
nvdaltovulnerabilidad CVSS 7.1 NVD
M Alto vulnerabilidad
19/06/2026
[CVE-2017-20266] Joomla SP Movie Database 1.3 contains an SQL injection vulnerability that allows unauthenticated att…
Joomla SP Movie Database 1.3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the searchword parameter. Attackers can send GET requests to the searchresults view with crafted SQL payloads in the searchword parameter to extract sensitive database information.
nvdaltovulnerabilidad CVSS 8.2 NVD

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →
M Alto vulnerabilidad
19/06/2026
[CVE-2017-20267] Joomla! Component Calendar Planner 1.0.1 contains an SQL injection vulnerability that allows unauthe…
Joomla! Component Calendar Planner 1.0.1 contains an SQL injection vulnerability that allows unauthenticated attackers to inject SQL commands through the category_id parameter. Attackers can send GET requests to the events view with malicious SQL code in the category_id parameter to extract sensitive database information.
nvdaltovulnerabilidad CVSS 8.2 NVD
M Alto vulnerabilidad
19/06/2026
[CVE-2017-20255] Joomla! Component JB Visa 1.0 contains an SQL injection vulnerability that allows unauthenticated at…
Joomla! Component JB Visa 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the visatype parameter. Attackers can send GET requests to index.php with the option=com_bookpro and view=popup parameters, injecting SQL commands in the visatype parameter to extract sensitive database information includin…
nvdaltovulnerabilidad CVSS 8.2 NVD
M Alto vulnerabilidad
19/06/2026
[CVE-2017-20256] Joomla Survey Force Deluxe 3.2.4 contains an SQL injection vulnerability that allows unauthenticated…
Joomla Survey Force Deluxe 3.2.4 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the invite parameter. Attackers can send GET requests to the component with crafted SQL payloads in the invite parameter to extract sensitive database information.
nvdaltovulnerabilidad CVSS 8.2 NVD
M Alto vulnerabilidad
19/06/2026
[CVE-2017-20257] Joomla! Component Quiz Deluxe 3.7.4 contains an SQL injection vulnerability that allows unauthentica…
Joomla! Component Quiz Deluxe 3.7.4 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL commands through the ajaxaction.flag_question task. Attackers can inject malicious SQL code via the stu_quiz_id or flag_quest parameters to manipulate database queries and extract sensitive information.
nvdaltovulnerabilidad CVSS 8.2 NVD
M Alto vulnerabilidad
19/06/2026
[CVE-2017-20258] Joomla! Component RPC Responsive Portfolio 1.6.1 contains an SQL injection vulnerability that allows…
Joomla! Component RPC Responsive Portfolio 1.6.1 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the id parameter. Attackers can send GET requests to index.php with option=com_pofos&view=pofo&id=[SQL] to extract sensitive database information.
nvdaltovulnerabilidad CVSS 8.2 NVD