CVE-2024-5735

CVE-2024-5735 AdmirorFrames Joomla! 扩展 params'templatesBASE' = JPATHBASE . DIRECTORYSEPARATOR . 'plugins' . DIRECTORYSEPARATOR . 'content' . $path . 'templates' . DIRECTORYSEPARATOR; 此问题是由于在构造图片路径时直接使用了 JPATHBASE 变量所致。该问题已在 AdmirorFrames Joomla! 扩展 5.0 版本中修复。 受影响版本 5.0 公告 请将 AdmirorFrames Joomla!...

CVE-2024-5736

Server Side Request Forgery SSRF vulnerability in AdmirorFrames Joomla! extension in afGdStream.php script allows to access local files or server pages available only from localhost. This issue affects AdmirorFrames: before 5.0...