Lucene search
+L

5 matches found

KittySploit
KittySploit
•added 2026/07/28 11:27 a.m.•1 views

Joomla! com_booking component 2.4.9 - Information Leak Detection

Joomla! combooking component suffers from Information leak vulnerability in which sensitive or confidential data is unintentionally exposed or made accessible to unauthorized individuals or systems. !/usr/bin/env python3 -- coding: utf-8 -- """Joomla! combooking component suffers from Information...

5.5AI score
SaveExploits0References3
attackerkb
attackerkb
•added 2026/06/19 5:52 p.m.•17 views

CVE-2023-54357

Joomla combooking component 2.4.9 contains an information disclosure vulnerability that allows unauthenticated attackers to enumerate user accounts by exploiting the getUserData function in the customer controller. Attackers can send GET requests to index.php with option=combooking,...

8.7CVSS5.8AI score0.00658EPSS
SaveExploits1References4Affected Software1
CVE
CVE
•added 2026/06/19 5:52 p.m.•60 views

CVE-2023-54357

CVE-2023-54357 affects Joomla com_booking 2.4.9. The vulnerability is an information disclosure in the getUserData function of the customer controller, permitting unauthenticated attackers to enumerate user accounts by brute-forcing the id parameter via requests like index.php?option=com_booking&...

8.7CVSS5.8AI score0.00658EPSS
SaveExploits1References4Affected Software1
Vulnrichment
Vulnrichment
•added 2026/06/19 5:52 p.m.•14 views

CVE-2023-54357 Joomla com_booking 2.4.9 Information Disclosure via Account Enumeration

Joomla combooking component 2.4.9 contains an information disclosure vulnerability that allows unauthenticated attackers to enumerate user accounts by exploiting the getUserData function in the customer controller. Attackers can send GET requests to index.php with option=combooking,...

8.7CVSS5.8AI score0.00658EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/19 12:00 a.m.•10 views

CVE-2023-54357: Observable Discrepancy

Joomla combooking component 2.4.9 contains an information disclosure vulnerability that allows unauthenticated attackers to enumerate user accounts by exploiting the getUserData function in the customer controller. Attackers can send GET requests to index.php with option=combooking,...

8.7CVSS5.8AI score0.00658EPSS
SaveExploits1References3
Rows per page
Query Builder