critical9.8
CVE-2017-18345
The Joomanager component through 2.0.0 for Joomla!
Impact
The Joomanager component through 2.0.0 for Joomla! has an arbitrary file download issue, resulting in exposing the credentials of the database via an index.php?option=com_joomanager&controller=details&task=download&path=configuration.php request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Joomanager Project | Joomanager | through 2.0.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://cxsecurity.com/issue/WLB-2018030054
- https://vel.joomla.org/vel-blog/2020-joomanager-2-0-0-other
- https://www.exploit-db.com/exploits/44252
- https://cxsecurity.com/issue/WLB-2018030054
- https://vel.joomla.org/vel-blog/2020-joomanager-2-0-0-other
- https://www.exploit-db.com/exploits/44252