high7.5
CVE-2024-5735
Full Path Disclosure vulnerability in AdmirorFrames Joomla!
Impact
Full Path Disclosure vulnerability in AdmirorFrames Joomla! extension in afHelper.php script allows an unauthorised attacker to retrieve location of web root folder. This issue affects AdmirorFrames: before 5.0.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Admiror-Design-Studio | Admirorframes | before 5.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://cert.pl/en/posts/2024/06/CVE-2024-5735/
- https://cert.pl/posts/2024/06/CVE-2024-5735/
- https://github.com/afine-com/CVE-2024-5735
- https://github.com/sectroyer/CVEs/tree/main/CVE-2024-5735
- https://github.com/vasiljevski/admirorframes/issues/3
- https://cert.pl/en/posts/2024/06/CVE-2024-5735/
- https://cert.pl/posts/2024/06/CVE-2024-5735/
- https://github.com/afine-com/CVE-2024-5735
- https://github.com/sectroyer/CVEs/tree/main/CVE-2024-5735
- https://github.com/vasiljevski/admirorframes/issues/3