CVE-2026-63685

CVE-2026-63685 affects the Joomla extension DB Replacer from regularlabs.com. The root cause is an authorization bypass in administrator routes and replacement requests where Super User permission and a valid token were not consistently required. This could allow an unauthorized backend user or C...

Joomla NoNumber Framework Local File Inclusion / Shell Upload

Exploit Title: NoNumber Framework Joomla! Plugin Multiple Vulnerabilities Discovery Date: 10 October 2011 Reported Date: 11 October 2011 Patch Date: 17 October 2011 Release Date: 17 October 2011 Author: jdc Software Link: http://nonumber.nl The nnframework plugin by NoNumber! contains multiple...