In Joomla! before 3.9.14, a missing access check in framework files could lead to a path disclosure.
We have discovered 99,151 live websites that are affected by CVE-2019-19845.
| Product | |
| Category | Content Management System |
| Vulnerable Domains | 99,151 live websites (97% of Joomla install base) |
| Vulnerable Versions |
|
| Vulnerable Versions Count | 76 versions ( 58% of all versions) |
| 6,328 websites | |
| 25,815 websites | |
| 7,872 websites | |
| 6,376 websites | |
| 4,619 websites | |
| 3,852 websites | |
| 3,814 websites | |
| 3,493 websites | |
| 3,292 websites | |
| 2,751 websites |
| .com | 21,811 websites |
| .it | 17,087 websites |
| .ru | 6,682 websites |
| .de | 3,610 websites |
| .nl | 3,040 websites |
| .cz | 2,914 websites |
| .pl | 2,579 websites |
| .org | 2,473 websites |
| .se | 2,119 websites |
| .net | 2,017 websites |
| Domain | Country | Rank | Contacts |
|---|---|---|---|
| *****.com | **,*** | ||
| ************.com | **,*** | ||
| ************.com | **,*** | ||
| *********************.com | **,*** | ||
| *****.org | **,*** | ||
| ********.com | **,*** | ||
| *****.it | **,*** | ||
| ******.cz | **,*** | ||
| *******.ru | **,*** | ||
| *******.com | **,*** |