CVE Intelligence

Extro Responsive Portfolio vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Extro Responsive Portfolio: 2 record(s), with affected versions and fixes.
cpe:2.3:a:extro:responsive_portfolio

CVE-2017-20258 High · 8.2 CWE-89 Jun 19, 2026
Joomla! Component RPC Responsive Portfolio 1.6.1 SQL Injection
Joomla! Component RPC Responsive Portfolio 1.6.1 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the id parameter. Attackers can send GET requests to index.php with option=com_pofos&view=pofo&id=[SQL] to extract sensitive database information.
CVE-2018-25381 High · 7.1 CWE-89 May 25, 2026
Joomla Responsive Portfolio 1.6.1 SQL Injection via filter parameters
Joomla Responsive Portfolio 1.6.1 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL commands through multiple filter parameters. Attackers can inject malicious SQL code via the filter_type_id, filter_pid_id, and filter_search parameters in POST requests to extract sensitive database information including credentials and server details.