CVE-2017-18345

The Joomanager component through 2.0.0 for Joomla! has an arbitrary file download issue, resulting in exposing the credentials of the database via an index.php?option=com_joomanager&controller=details&task=download&path=configuration.php request.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2018-08-26

Last modified

2024-08-05

Weaknesses

CWE-200

Affected products

• Joomanager (Joomanager Project)

References

• https://cxsecurity.com/issue/WLB-2018030054
• https://vel.joomla.org/vel-blog/2020-joomanager-2-0-0-other
• https://www.exploit-db.com/exploits/44252