VendorsJoomla!com_mailtoany version
Vulnerabilities

Joomla! Com Mailto any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

2CVEs
CVE-2009-1499
SQL injection vulnerability in the MailTo (aka com_mailto) component in Joomla! allows remote attackers to execute arbitrary SQL commands via the article parameter in index.php. NOTE: SecurityFocus states that this issue has been disputed by the vendor.
Published 2009-05-01 · Modified
7.51 PoCEPSS 0.018
CVE-2008-4103
The mailto (aka com_mailto) component in Joomla! 1.5 before 1.5.7 sends e-mail messages without validating the URL, which allows remote attackers to transmit spam.
Published 2008-09-18 · Modified
5.0EPSS 0.015