Empresa
¿Quiénes somos? Visión y Valores
Herramientas
Email Checker Vigía DNS SSL Checker Password Strength HTTP Headers
Alertas
Todas las alertas Vulnerabilidades Incidentes Solo críticas En CISA KEV
Editorial
Análisis técnico ¿Cuál es mi IP?
Blog
Blog 2MCI ISO 27001 Amenazas LATAM Recursos Gratuitos eBook Gratuito Newsletter Podcast / YouTube
Empresa
Servicios Contacto Suscribirse al Newsletter
🆕 Nuevo en 2MCI
✨ Crear cuenta gratis 🛠️ Ver herramientas sin registro
Ya tengo cuenta
🔒 Iniciar sesión
Equipo
🏠 Portal interno 2MCI
Inicio/Alertas
Seguridad de la Información

Alertas de Seguridad de la Información

Vulnerabilidades explotadas activamente, incidentes y análisis relevantes para México y LATAM. Actualizado automáticamente desde fuentes oficiales.

48 vulnerabilidades en CISA KEV — explotación activa confirmada Ver todas →
Última alerta publicada ahora mismo
Buscando: "Joomla" — 77 resultados ✕ Limpiar búsqueda
13,509
Total alertas
3066
Críticas
10171
Altas
8
Ransomware
1785
Esta semana
RSS
Alta × Limpiar todo ×
M Alto vulnerabilidad
19/06/2026
[CVE-2019-25754] Joomla Component vRestaurant 1.9.4 contains an SQL injection vulnerability that allows unauthenticat…
Joomla Component vRestaurant 1.9.4 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the keysearch parameter. Attackers can send POST requests to the menu-listing-layout endpoint with crafted SQL payloads in the keysearch parameter to extract database table names and sensitive information from the data…
nvdaltovulnerabilidad CVSS 8.2 NVD
M Alto vulnerabilidad
19/06/2026
[CVE-2019-25749] Joomla J-CruisePortal 6.0.4 contains an SQL injection vulnerability that allows authenticated attack…
Joomla J-CruisePortal 6.0.4 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the guest_adult parameter. Attackers can send POST requests to the cruises endpoint with crafted SQL payloads in the guest_adult parameter to extract sensitive database information or manipulate database records.
nvdaltovulnerabilidad CVSS 7.1 NVD
M Alto vulnerabilidad
19/06/2026
[CVE-2017-20278] Joomla Component JoomRecipe 1.0.3 contains an SQL injection vulnerability that allows unauthenticate…
Joomla Component JoomRecipe 1.0.3 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the category parameter. Attackers can send GET requests to the all-recipes endpoint with malicious SQL payloads in the category path segment to extract sensitive database information.
nvdaltovulnerabilidad CVSS 8.2 NVD
M Alto vulnerabilidad
19/06/2026
[CVE-2017-20279] Joomla Payage 2.05 contains an SQL injection vulnerability that allows unauthenticated attackers to …
Joomla Payage 2.05 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the aid parameter. Attackers can send GET requests to index.php with malicious aid values in the make_payment task to extract sensitive database information using boolean-based blind or time-based blind techniques.
nvdaltovulnerabilidad CVSS 8.2 NVD
M Alto vulnerabilidad
19/06/2026
[CVE-2017-20280] Joomla Component Myportfolio 3.0.2 contains an SQL injection vulnerability that allows unauthenticat…
Joomla Component Myportfolio 3.0.2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the pid parameter. Attackers can send GET requests to index.php with malicious pid values in the task=project&view=grid endpoint to extract sensitive database information.
nvdaltovulnerabilidad CVSS 8.2 NVD
M Alto vulnerabilidad
19/06/2026
[CVE-2017-20281] Joomla! Component Extra Search 2.2.8 contains an SQL injection vulnerability that allows unauthentic…
Joomla! Component Extra Search 2.2.8 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the establename parameter. Attackers can send GET requests to index.php with the option=com_extrasearch parameter and malicious SQL in the establename field to extract sensitive database information.
nvdaltovulnerabilidad CVSS 8.2 NVD
M Alto vulnerabilidad
19/06/2026
[CVE-2017-20282] Joomla! Component jCart for OpenCart 2.0 contains an SQL injection vulnerability that allows unauthe…
Joomla! Component jCart for OpenCart 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the product_id parameter. Attackers can send GET requests to index.php with the option=com_jcart&route=product/product parameters and malicious product_id values to extract sensitive database information.
nvdaltovulnerabilidad CVSS 8.2 NVD

📬 Alertas semanales SI directo en tu email

Las vulnerabilidades más críticas para LATAM, con contexto y recomendaciones accionables. Gratis.

Suscribirme →
M Alto vulnerabilidad
19/06/2026
[CVE-2019-25748] Joomla JHotelReservation 6.0.7 contains an SQL injection vulnerability that allows unauthenticated a…
Joomla JHotelReservation 6.0.7 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the rooms parameter. Attackers can send POST requests to the search-hotels endpoint with crafted SQL payloads in the rooms parameter to extract sensitive database information including version details.
nvdaltovulnerabilidad CVSS 8.2 NVD
M Alto vulnerabilidad
19/06/2026
[CVE-2017-20270] Joomla! Component Twitch Tv 1.1 contains an SQL injection vulnerability that allows unauthenticated …
Joomla! Component Twitch Tv 1.1 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the username and id parameters. Attackers can send GET requests to index.php with option=com_twitchtv and view parameters containing SQL injection payloads to extract sensitive database information including credentials a…
nvdaltovulnerabilidad CVSS 8.2 NVD
M Alto vulnerabilidad
19/06/2026
[CVE-2017-20271] Joomla StreetGuessr Game 1.1.8 contains an SQL injection vulnerability that allows unauthenticated a…
Joomla StreetGuessr Game 1.1.8 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the catid parameter. Attackers can send GET requests to index.php with the option=com_streetguess&view=maps parameters and inject SQL code in the catid parameter to extract sensitive database information including version …
nvdaltovulnerabilidad CVSS 8.2 NVD
M Alto vulnerabilidad
19/06/2026
[CVE-2017-20272] Joomla Ultimate Property Listing 1.0.2 contains an SQL injection vulnerability that allows unauthent…
Joomla Ultimate Property Listing 1.0.2 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the sf_selectuser_id parameter. Attackers can send GET requests to index.php with the option=com_upl and view=propertylisting parameters to extract sensitive database information including table names and column st…
nvdaltovulnerabilidad CVSS 8.2 NVD
M Alto vulnerabilidad
19/06/2026
[CVE-2017-20273] Joomla Event Registration Pro Calendar 4.1.3 contains an SQL injection vulnerability that allows una…
Joomla Event Registration Pro Calendar 4.1.3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the id parameter. Attackers can send GET requests to index.php with option=com_registrationpro&view=category&id parameter containing SQL injection payloads to extract sensitive database information.
nvdaltovulnerabilidad CVSS 8.2 NVD
M Alto vulnerabilidad
19/06/2026
[CVE-2017-20274] Joomla LMS King Professional 3.2.4.0 contains an SQL injection vulnerability that allows unauthentic…
Joomla LMS King Professional 3.2.4.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the cp_id parameter. Attackers can send GET requests to index.php with the option=com_lmsking, view=lmsking, layout=learningpath, and task=learningPath parameters to extract sensitive database information.
nvdaltovulnerabilidad CVSS 8.2 NVD
M Alto vulnerabilidad
19/06/2026
[CVE-2017-20275] Joomla! Component PHP-Bridge 1.2.3 contains an SQL injection vulnerability that allows unauthenticat…
Joomla! Component PHP-Bridge 1.2.3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the id parameter. Attackers can send GET requests to index.php with option=com_phpbridge&view=phpview parameters and inject SQL code in the id parameter to extract database information including table and column names.
nvdaltovulnerabilidad CVSS 8.2 NVD
M Alto vulnerabilidad
19/06/2026
[CVE-2017-20276] Joomla! Component SIMGenealogy 2.1.5 contains an SQL injection vulnerability that allows unauthentic…
Joomla! Component SIMGenealogy 2.1.5 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the type parameter. Attackers can send GET requests to index.php with the option=com_simgenealogy, view=latest parameters and inject malicious SQL in the type parameter to extract sensitive database information.
nvdaltovulnerabilidad CVSS 8.2 NVD

🛡 ¿Estás expuesto a alguna de estas vulnerabilidades?

Evaluación gratuita inicial con el equipo 2MCI: identifica exposición y plan de remediación.

Habla con un experto →
M Alto vulnerabilidad
19/06/2026
[CVE-2017-20277] Joomla JoomRecipe 1.0.4 component contains a blind SQL injection vulnerability in the search_author …
Joomla JoomRecipe 1.0.4 component contains a blind SQL injection vulnerability in the search_author parameter on the search results page. Attackers can inject SQL code through POST requests to the search endpoint to extract database information using boolean-based blind SQL injection techniques.
nvdaltovulnerabilidad CVSS 8.2 NVD
M Alto vulnerabilidad
19/06/2026
[CVE-2017-20269] Joomla! Component KissGallery 1.0.0 contains an SQL injection vulnerability that allows unauthentica…
Joomla! Component KissGallery 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to inject SQL commands through the component URL path. Attackers can supply malicious SQL code in the kissgallery endpoint to execute arbitrary database queries and extract sensitive information.
nvdaltovulnerabilidad CVSS 8.2 NVD
M Alto vulnerabilidad
19/06/2026
[CVE-2017-20268] Joomla! Component Zap Calendar Lite 4.3.4 contains an SQL injection vulnerability that allows unauth…
Joomla! Component Zap Calendar Lite 4.3.4 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'eid' parameter. Attackers can send GET requests to the RSVP plugin endpoint with crafted SQL payloads to extract sensitive database information including database names and table structures.
nvdaltovulnerabilidad CVSS 8.2 NVD
M Alto vulnerabilidad
19/06/2026
[CVE-2017-20263] Joomla! Component FocalPoint Pro/Free 1.2.3 contains an SQL injection vulnerability that allows unau…
Joomla! Component FocalPoint Pro/Free 1.2.3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the id parameter. Attackers can send GET requests to index.php with option=com_focalpoint, view=location, and a crafted id parameter containing SQL commands to extract sensitive database information.
nvdaltovulnerabilidad CVSS 8.2 NVD
M Alto vulnerabilidad
19/06/2026
[CVE-2017-20264] Joomla! Component Sponsor Wall 8.0 contains an SQL injection vulnerability that allows unauthenticat…
Joomla! Component Sponsor Wall 8.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the wallid parameter. Attackers can send GET requests to index.php with the option=com_sponsorwall&task=click&wallid parameter containing SQL injection payloads to extract sensitive database information including crede…
nvdaltovulnerabilidad CVSS 7.1 NVD