CVE-2026-48908
Published Jun 20, 2026A vulnerability in SP Page Builder for Joomla allows unauthenticated users to upload arbitrary files, ultimately resulting in the upload and execution of PHP code.
- evidence mentions
- 8
- Buzz score
- 85.0
Daily materialized evidence profile
CWE CWE-434
This factual profile is rebuilt from stored cvebuzz evidence each day. It is a timestamped snapshot, not an immutable publication.
Refreshed UTC
Stored evidence summary
- Sample size
- 4,287
- CVEs with mentions
- 1,421
- Total mentions
- 4,113
- CVEs with KEV
- 27
- CVEs with PoC
- 216
Attack vector counts
- Network
- 4,133
- Adjacent network
- 44
- Local
- 106
- Physical
- 4
Top snapshot Buzz entries
Up to five denormalized entries captured by the same daily profile refresh.
CVE-2017-12615
Published Sep 19, 2017When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default to false) it was possible to up…
- evidence mentions
- 28
- Buzz score
- 84.5
CVE-2026-48939
Published Jun 20, 2026A vulnerability in the iCagenda extension for Joomla allows the upload of arbitrary files in the file attachment feature, ultimately resulting in PHP code upload and execution.
- evidence mentions
- 11
- Buzz score
- 80.2
CVE-2026-56290
Published Jun 29, 2026Joomla Extension - joomlack.fr - Unauthenticated file upload in Page Builder CK extension < 3.6.0 - The Joomla extension Page Builder CK is vulnerable to an unauthenticated arbitr…
- evidence mentions
- 8
- Buzz score
- 79.4
CVE-2025-52691
Published Dec 29, 2025Successful exploitation of the vulnerability could allow an unauthenticated attacker to upload arbitrary files to any location on the mail server, potentially enabling remote code…
- evidence mentions
- 12
- Buzz score
- 75.2