Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Nikola Vasilijevski AdmirorFrames 5.0 Clear all filters
TI-2024-05331 CVE-2024-5737

HTML Injection in AdmirorFrames Joomla! Extension

Priority MEDIUM 61

Script afGdStream.php in AdmirorFrames Joomla! extension doesn’t specify a content type and as a result default (text/html) is used.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.01084 Published 2024-06-28 Fixed in 5.0 CWE-79
TI-2024-05330 CVE-2024-5736

SSRF in AdmirorFrames Joomla! Extension

Priority LOW 38

Server Side Request Forgery (SSRF) vulnerability in AdmirorFrames Joomla! extension in afGdStream.php script allows to access local files or server pages available only from localhost.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.01227 Published 2024-06-28 Fixed in 5.0 CWE-918
TI-2024-05329 CVE-2024-5735 · GHSA-4f69-vpc6-qrx2

Full Path Disclosure in AdmirorFrames Joomla! Extension

Priority HIGH 67

Full Path Disclosure vulnerability in AdmirorFrames Joomla! extension in afHelper.php script allows an unauthorised attacker to retrieve location of web root folder.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.01515 Published 2024-06-28 Fixed in 5.0 CWE-497