PT-2026-78449 · Cmsjunkie.Com · J-Businessdirectory Extension For Joomla

CVE-2026-75950

·

Publicado

2026-08-19

·

Atualizado

2026-08-19

CVSS v4.0

6.9

Média

VetorAV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
Joomla Extension - cmsjunkie.com - Unauthenticated listing ownership takeover in J-BusinessDirectory < 6.2.3 - Ownership could be changed using attacker-supplied company and user IDs, including for listings that already had an owner. 6.2.3 binds the action to the authenticated user and only allows unowned listings.

Correção

IDOR

Improper Access Control

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-639CWE-284

Identificadores relacionados

CVE-2026-75950

Produtos afetados

J-Businessdirectory Extension For Joomla