DB Replacer extension for Joomla vulnerabilities
2 known vulnerabilities in DB Replacer extension for Joomla from Regularlabs.com. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
2vulnerabilities
0critical
2high
0exploited
8.4average CVSS score
Latest first
- 8.8 High severity
DB Replacer extension for Joomla: Improper Access Control
Joomla Extension - regularlabs.com - Authorization bypass in DB Replacer extension - Administrator routes and replacement requests did not consistently require Super User permission and a valid token. An unauthorized backend user or CSRF attack could perform d
- 8.0 High severity
Advanced Module Manager extension for Joomla: Improper Access Control
Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various Regular Labs extension AJAX endpoints - Privileged Regular Labs AJAX endpoints did not consistently require valid CSRF tokens, matching component/item permissions