Phil Taylor

An improper Access Control List (ACL) implementation allows authenticated users to perform unauthorized file operations on files owned by other users. These operations include reading, deleting, overwriting, and re-assigning permissions.

An improper Access Control List (ACL) implementation allows unauthenticated users to perform unauthorized file operations on every file managed within the extension. These operations include reading, deleting, overwriting, and re-assigning permissions.

Stored cross-site scripting occurs via a comment avatar. Cross-site scripting is a technique where malicious scripts are injected into trusted websites.

The photo viewer component allows unauthenticated attackers to perform an arbitrary file read, enabling them to view files on the system without authentication.

This issue involves multiple unauthenticated file system disclosures within the extension, allowing unauthorized access to sensitive files on the server.

A payment bypass issue exists in the Gridbox extension for Joomla, allowing users to circumvent the payment process.

Multiple SQL injection vectors allow unauthenticated actors to inject SQL in queries. SQL injection is a technique where malicious SQL statements are inserted into entry fields for execution, potentially allowing unauthorized access to the database.

File upload methods allow authenticated attackers to upload arbitrary files. This issue can lead to authenticated Remote Code Execution (RCE), which is the ability to execute arbitrary commands on a remote machine, if combined with another flaw that allows the attacker to create the required account.

An issue exists where unauthenticated actors can recursively delete directories through the `generateNewApp()` function.

A privilege escalation issue exists in the registration method of the Gridbox extension for Joomla. This flaw allows unauthenticated actors to register new accounts with administrative permissions by providing specific usergroup IDs.

An issue exists in the `resetPassword()` method that allows unauthenticated actors to reset the password of any user, enabling them to log in and perform actions as those users, with the exception of super administrators.

Cross-Site Request Forgery (CSRF) vectors exist in the administration interface. CSRF is a type of attack that tricks a victim into submitting a malicious request. It inherits the victim's authentication and session cookies, allowing the attacker to perform actions on behalf of the user.

An account takeover issue exists in the `socialLogin()` method, which allows an attacker to authenticate as any user on the target site.

A hardcoded, product-wide secret allows unauthenticated attackers to perform mail relay by forging the mail from address of forms.

Authenticated users can exploit an SQL injection issue caused by improper validation of parameters within the media manager search and date filters. SQL injection is a technique where malicious SQL statements are inserted into entry fields for execution, potentially allowing unauthorized access to the database.

Improper validation of order parameters in the Dynamic Content endpoint allows for an unauthenticated SQL injection. SQL injection is a technique where malicious SQL statements are inserted into entry fields for execution, potentially allowing unauthorized access to the database.

Improper path validation and Access Control List (ACL) checks in the media manager allow an authenticated user to perform arbitrary file deletion.

Improper validation of order parameters allows an unauthenticated SQL injection, which is a technique used to manipulate database queries. This issue enables full read access to the database, including sensitive information such as credentials and sessions.

An issue exists where critical order and payment information, including states, are processed from client-side input. This allows unauthenticated attackers to manipulate the payment and order states of arbitrary orders.

Improper access checks allow logged-in users to retrieve order and personal customer information for any order within the system.