Read the docs

Nikola Vasilijevski

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Nikola Vasilijevski records in CISA KEV

No Nikola Vasilijevski vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Admirorframes 3 records HIGH Admiror Gallery 2 records LOW

Records

3 records in Admirorframes · all components

TI-2024-05329 CVE-2024-5735 · GHSA-4f69-vpc6-qrx2

Full Path Disclosure in AdmirorFrames Joomla! Extension

Priority HIGH 67

Full Path Disclosure vulnerability in AdmirorFrames Joomla! extension in afHelper.php script allows an unauthorised attacker to retrieve location of web root folder.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.01515 Published 2024-06-28 Fixed in 5.0 CWE-497
TI-2024-05331 CVE-2024-5737

HTML Injection in AdmirorFrames Joomla! Extension

Priority MEDIUM 61

Script afGdStream.php in AdmirorFrames Joomla! extension doesn’t specify a content type and as a result default (text/html) is used.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.01084 Published 2024-06-28 Fixed in 5.0 CWE-79
TI-2024-05330 CVE-2024-5736

SSRF in AdmirorFrames Joomla! Extension

Priority LOW 38

Server Side Request Forgery (SSRF) vulnerability in AdmirorFrames Joomla! extension in afGdStream.php script allows to access local files or server pages available only from localhost.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.01227 Published 2024-06-28 Fixed in 5.0 CWE-918
Open these records in search →