Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2024-5737

HTML Injection in AdmirorFrames Joomla! Extension

Script afGdStream.php in AdmirorFrames Joomla! extension doesn’t specify a content type and as a result default (text/html) is used. An attacker may embed HTML tags directly in image data which is rendered by a webpage as HTML. This issue affects AdmirorFrames: before 5.0.

CVSS 4.0 · 6.3 Medium EPSS 1.1% KEV · Not listed
Vendors
Admiror-design-studio
Products
Admirorframes
CVE-2024-5736

SSRF in AdmirorFrames Joomla! Extension

Server Side Request Forgery (SSRF) vulnerability in AdmirorFrames Joomla! extension in afGdStream.php script allows to access local files or server pages available only from localhost. This issue affects AdmirorFrames: before 5.0.

CVSS 4.0 · 8.2 High EPSS 1.2% KEV · Not listed
Vendors
Admiror-design-studio
Products
Admirorframes
CVE-2024-5735

Full Path Disclosure in AdmirorFrames Joomla! Extension

Full Path Disclosure vulnerability in AdmirorFrames Joomla! extension in afHelper.php script allows an unauthorised attacker to retrieve location of web root folder. This issue affects AdmirorFrames: before 5.0.

CVSS 4.0 · 6.3 Medium EPSS 1.5% KEV · Not listed
Vendors
Admiror-design-studio
Products
Admirorframes