Advisories · Technology
lomart.fr UP plugin for Joomla.
Every CVE that names lomart.fr UP plugin for Joomla among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.2 CriticalCritical · CVSS 9+
Joomla Extension - lomart.fr - Various path traversal / file access vectors in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29
- lomart.fr UP plugin for Joomla
- Path traversal
- Broken access control
- CVSS 10.0 CriticalCritical · CVSS 9+
Joomla Extension - lomart.fr - Unauthenticated remote code installation in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29
- lomart.fr UP plugin for Joomla
- Path traversal
- Broken access control
- CVSS 8.3 High
Joomla Extension - lomart.fr - Various SQL injection vectors in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29
- lomart.fr UP plugin for Joomla
- SQL injection
- CVSS 9.4 CriticalCritical · CVSS 9+
Joomla Extension - lomart.fr - Authenticated, privileged PHP command injection in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29
- lomart.fr UP plugin for Joomla
- Code injection