Extro Vulnerabilities and Affected Products
Explore source-attributed vulnerabilities associated with Extro products.
Products
- eXtroForms1 vulnerability
- Responsive Portfolio1 vulnerability
- RPC1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2017-20258HIGH | Joomla! Component RPC Responsive Portfolio 1.6.1 SQL InjectionJoomla! Component RPC Responsive Portfolio 1.6.1 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the id parameter. Attackers can send GET requests to index.php with option=com_pofos&view=pofo&id=[SQL] to extract sensitive database information. CWE-89Jun 19, 2026 | CVSS8.8v4.0 | EPSS0.449% | PoCs1 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2018-25381HIGH | Joomla Responsive Portfolio 1.6.1 SQL Injection via filter parametersJoomla Responsive Portfolio 1.6.1 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL commands through multiple filter parameters. Attackers can inject malicious SQL code via the filter_type_id, filter_pid_id, and filter_search parameters in POST requests to extract sensitive database information including credentials and server details. CWE-89May 25, 2026 | CVSS7.1v4.0 | EPSS0.284% | PoCs1 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2018-25380HIGH | Joomla Component eXtroForms 2.1.5 SQL Injection via filter parametersJoomla Component eXtroForms 2.1.5 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL commands through the filter_type_id, filter_pid_id, and filter_search parameters. Attackers can submit POST requests to the extroformfield view with malicious SQL payloads to extract sensitive database information and server data. CWE-89May 25, 2026 | CVSS7.1v4.0 | EPSS0.284% | PoCs1 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |