Skip to content
OpenAdvisories

Vendor

phoca.cz

17 known vulnerabilities.

Products

Phoca Commander extension for Joomla 5 Phoca Cart extension for Joomla 4 Phoca Download extension for Joomla 2 Phoca Gallery extension for Joomla 1 Phoca Maps extension for Joomla 1 Phoca Guestbook extension for Joomla 1 phoca.cz - Phoca Maps for Joomla 1 phoca.cz - Phoca Commander for Joomla 1 phoca.cz Phoca Download extension for Joomla 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2026-74251 Public exploit

    Joomla Extension - phoca.cz - Unauthenticated SQL injection via attribute filter in Phoca Cart 5.0.0-6.1.6

    Joomla Extension - phoca.cz - Unauthenticated SQL injection via attribute filter in Phoca Cart 5.0.0-6.1.6 - The a[] (attribute) and s[] (specification) GET array parameters on Phoca Cart's public shop items page are concatenated raw into SQL WHERE clauses wi…

    phoca.cz Phoca Cart extension for Joomla Web / CMS