AdmirorFrames vulnerabilities

2 known vulnerabilities in AdmirorFrames from Nikola Vasilijevski. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  AdmirorFrames: Server-Side Request Forgery

  CVE-2024-5736Jun 28, 2024Nikola VasilijevskiEPSS 1.23%

  Server Side Request Forgery (SSRF) vulnerability in AdmirorFrames Joomla! extension in afGdStream.php script allows to access local files or server pages available only from localhost. This issue affects AdmirorFrames: before 5.0.

• 7.5 High severity

  AdmirorFrames: Exposure of Sensitive System Information to an Unauthorized Control Sphere

  CVE-2024-5735Jun 28, 2024Nikola VasilijevskiEPSS 1.52%

  Full Path Disclosure vulnerability in AdmirorFrames Joomla! extension in afHelper.php script allows an unauthorised attacker to retrieve location of web root folder. This issue affects AdmirorFrames: before 5.0.