Vendors / acyba Records 12 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 10
Exploited now acyba records in CISA KEV No acyba vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 48
CSV Injection (aka Excel Macro Injection or Formula Injection) exists in the export feature in the Acyba AcyMailing extension before 5.9.6 for Joomla! via a value that is mishandled in a CSV export.
CVSS 3.0 HIGH 8.8· Network · No auth · User interaction · EPSS 0.07026 · Published 2018-03-28 · No fix listed CWE-1236
Priority LOW 34
Acyba AcyMailing before 6.9.2 mishandles file uploads by admins.
CVSS 3.1 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.013 · Published 2020-03-24 · No fix listed CWE-434
Priority LOW 34
SQL Injection exists in AcyMailing Joomla Component before 4.9.5 via exportgeolocorder in a geolocation_longitude request to index.php.
CVSS 3.1 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00982 · Published 2020-03-09 · No fix listed CWE-89
Open these records in search → All records by CVSS severity
1 10 1 0 0
