CVE-2023-39972 Extension - acymailing.com - Improper Access Control in AcyMailing Enterprise component for Joomla 6.7.0-8.6.3

Improper Access Control vulnerability in AcyMailing Enterprise component for Joomla. It allows unauthorized users to create new mailing lists...

CVE-2023-39972

CVE-2023-39972 affects the AcyMailing Enterprise component for Joomla. The issue is an Improper Access Control that allows unauthorized users to create new mailing lists. Root cause: insufficient access control enforcement in the component. Initial sources list CVSSv3.1 base score 4.3 (Medium) wi...

CVE-2023-39974

CVE-2023-39974 affects the AcyMailing Enterprise component for Joomla . The issue is an exposure of sensitive information that allows an unauthorized actor to obtain the number of subscribers in a specific list. The available documents describe the vulnerability and impact but do not provide conc...

CVE-2023-39973

CVE-2023-39973 affects the AcyMailing Enterprise component for Joomla, describing an improper access control that allows unauthorized removal of attachments from campaigns. The connected sources confirm the vendor/product and the underlying root cause/impact but do not specify affected versions o...

CVE-2023-39973 Extension - acymailing.com - Improper Access Control in AcyMailing Enterprise component for Joomla 6.7.0-8.6.3

Improper Access Control vulnerability in AcyMailing Enterprise component for Joomla. It allows the unauthorized removal of attachments from campaigns...

CVE-2023-39973 Extension - acymailing.com - Improper Access Control in AcyMailing Enterprise component for Joomla 6.7.0-8.6.3

Improper Access Control vulnerability in AcyMailing Enterprise component for Joomla. It allows the unauthorized removal of attachments from campaigns...

CVE-2023-39970 Extension - acymailing.com - RCE in AcyMailing component for Joomla 6.7.0-8.5.0

Unrestricted Upload of File with Dangerous Type vulnerability in AcyMailing component for Joomla. It allows remote code execution...

CVE-2023-39970 Extension - acymailing.com - RCE in AcyMailing component for Joomla 6.7.0-8.5.0

Unrestricted Upload of File with Dangerous Type vulnerability in AcyMailing component for Joomla. It allows remote code execution...

CVE-2023-39970

CVE-2023-39970 affects the AcyMailing Joomla extension. The issue is an Unrestricted Upload of File with Dangerous Type that allows remote code execution. Public records in the CVE entries indicate impact on AcyMailing versions 6.7.0–8.5.0 (per CVE-List entry). The provided documents consistently...

CVE-2023-39970: Unrestricted Upload of File with Dangerous Type

Unrestricted Upload of File with Dangerous Type vulnerability in AcyMailing component for Joomla. It allows remote code execution...

CVE-2023-39974: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of Sensitive Information vulnerability in AcyMailing Enterprise component for Joomla. It allows unauthorized actors to get the number of subscribers in a specific list...

AcyMailing Joomla Component 访问控制错误漏洞

AcyMailing Joomla Component is an email marketing component used in the Joomla content management system. An Access Control Error vulnerability exists in AcyMailing Joomla Component, which stems from the presence of incorrect access control that allows unauthorized users to create new mailing lis...

PT-2023-27186 · Joomla · Acymailing Enterprise

Name of the Vulnerable Software and Affected Versions: AcyMailing Enterprise component for Joomla affected versions not specified Description: The issue allows unauthorized actors to obtain the number of subscribers in a specific list, exposing sensitive information. Recommendations: At the momen...

PT-2023-27184

Name of the Vulnerable Software and Affected Versions AcyMailing Enterprise component for Joomla affected versions not specified Description The issue is related to an Improper Access Control vulnerability in the AcyMailing Enterprise component for Joomla. This vulnerability allows unauthorized...

AcyMailing Joomla Component 代码问题漏洞

AcyMailing Joomla Component is an email marketing component used in the Joomla content management system. A security vulnerability exists in AcyMailing Joomla Component that stems from the unrestricted upload of dangerous types of files that allow remote code execution...

AcyMailing Joomla Component 安全漏洞

AcyMailing Joomla Component is an email marketing component used in the Joomla content management system. A security vulnerability exists in AcyMailing Joomla Component that stems from the presence of a sensitive information disclosure that allows an unauthorized participant to obtain the number ...

CVE-2023-39973: Improper Access Control

Improper Access Control vulnerability in AcyMailing Enterprise component for Joomla. It allows the unauthorized removal of attachments from campaigns...

AcyMailing Joomla Component 跨站脚本漏洞

AcyMailing Joomla Component is an email marketing component used in the Joomla content management system. A security vulnerability exists in AcyMailing Joomla Component that stems from improper input neutralization and allows cross-site scripting XSS...

AcyMailing Joomla Component 安全漏洞

AcyMailing Joomla Component is an email marketing component used in the Joomla content management system. A security vulnerability exists in AcyMailing Joomla Component that stems from the presence of incorrect access control that allows unauthorized removal of attachments from campaigns...

CVE-2023-39971: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation vulnerability in AcyMailing Enterprise component for Joomla allows XSS. This issue affects AcyMailing Enterprise component for Joomla: 6.7.0-8.6.3...