Advisories · Technology
phoca.cz Phoca Cart extension for Joomla.
Every CVE that names phoca.cz Phoca Cart extension for Joomla among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.7 High
Joomla Extension - phoca.cz - Authorisation bypass through user-controlled key (IDOR) in Order View in Phoca Cart 5.0.0 - 6.1.8
- phoca.cz Phoca Cart extension for Joomla
- Broken access control
- CVSS 8.6 High
Joomla Extension - phoca.cz - Stored XSS via User-Agent header in Admin Order View in Phoca Cart 5.0.0-6.1.7
- phoca.cz Phoca Cart extension for Joomla
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
Joomla Extension - phoca.cz - Reflected XSS via price_from & price_to filter parameters in Phoca Cart 5.0.0-6.1.7
- phoca.cz Phoca Cart extension for Joomla
- Cross-site scripting (XSS)
- CVSS 9.3 CriticalCritical · CVSS 9+
Joomla Extension - phoca.cz - Unauthenticated SQL injection via attribute filter in Phoca Cart 5.0.0-6.1.6
- phoca.cz Phoca Cart extension for Joomla
- SQL injection