Description (CNA)
The Joomanager component through 2.0.0 for Joomla! has an arbitrary file download issue, resulting in exposing the credentials of the database via an index.php?option=com_joomanager&controller=details&task=download&path=configuration.php request.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://vel.joomla.org/vel-blog/2020-joomanager-2-0-0-other
- https://www.exploit-db.com/exploits/44252
- https://cxsecurity.com/issue/WLB-2018030054
ADP enrichment
No English description supplied.