Skip to content
OpenAdvisories

Vendor

phoca.cz

17 known vulnerabilities.

Products

Phoca Commander extension for Joomla 5 Phoca Cart extension for Joomla 4 Phoca Download extension for Joomla 2 Phoca Gallery extension for Joomla 1 Phoca Maps extension for Joomla 1 Phoca Guestbook extension for Joomla 1 phoca.cz - Phoca Maps for Joomla 1 phoca.cz - Phoca Commander for Joomla 1 phoca.cz Phoca Download extension for Joomla 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.3
    CVE-2026-74251 Public exploit

    Joomla Extension - phoca.cz - Unauthenticated SQL injection via attribute filter in Phoca Cart 5.0.0-6.1.6

    Joomla Extension - phoca.cz - Unauthenticated SQL injection via attribute filter in Phoca Cart 5.0.0-6.1.6 - The a[] (attribute) and s[] (specification) GET array parameters on Phoca Cart's public shop items page are concatenated raw into SQL WHERE clauses wi…

    phoca.cz Phoca Cart extension for Joomla Web / CMS
  • Critical 9.0
    CVE-2026-57828

    Joomla Extension - phoca.cz - Authenticated file upload in Phoca Downloads component < 6.1.3

    Joomla Extension - phoca.cz - Authenticated file upload in Phoca Downloads component < 6.1.3 - The Joomla extension Phoca Downloads is vulnerable to an authenticated arbitrary file upload that allows registered users uploading executable files and leads to fu…

    phoca.cz phoca.cz Phoca Download extension for Joomla Web / CMS
  • Critical 9.2
    CVE-2025-54473

    Extension - phoca.cz - Authenticated RCE vulnerability in Phoca Commander component 1.0.0-4.0.0 and 5.0.0-5.0.1 for Joomla

    An authenticated RCE vulnerability in Phoca Commander component 1.0.0-4.0.0 and 5.0.0-5.0.1 for Joomla was discovered. The issue allows code execution via the unzip feature.

    phoca.cz phoca.cz - Phoca Commander for Joomla Web / CMS