PT-2018-12602
CVE-2018-14592
·
تاريخ النشر
2018-09-20
·
تاريخ التحديث
2018-11-09
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
CWJoomla CW Article Attachments PRO extension versions prior to 2.0.7
CW Article Attachments FREE extension versions prior to 1.0.6
Description
The issue allows SQL Injection within the "download.php" endpoint. This could potentially lead to unauthorized access to sensitive data.
Recommendations
For CWJoomla CW Article Attachments PRO extension versions prior to 2.0.7, update to version 2.0.7 or later.
For CW Article Attachments FREE extension versions prior to 1.0.6, update to version 1.0.6 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾