CVE-2026-66491

Beliebiges Dateilesen Arbitrary File Read über getSource in PhocaCommander PhocaCommander ≤ 6.1.3 – Pfad-Traversal für authentifizierte Administratoren, kein CSRF erforderlich ZUSAMMENFASSUNG Im Endpunkt des Datei-Editors von PhocaCommander existiert eine Schwachstelle, die das beliebige Lesen vo...

CVE-2021-2471

CVE-2021-2471 - XXE in MySQL Connector/J Vulnerabilità nel prodotto MySQL Connectors di Oracle MySQL componente: Connector/J. Le versioni supportate interessate sono 8.0.26 e precedenti. Attacchi riusciti di questa vulnerabilità possono comportare accesso non autorizzato a dati critici o accesso...

CVE-2026-66491

Joomla Extension - phoca.cz - Arbitrary File Read in Phoca Commander 1.0.0-6.1.3 - Improper limitation of paths in the getSource function lead to an arbitrary file read vulnerability...

EUVD-2026-54412

Joomla Extension - phoca.cz - Arbitrary File Read in Phoca Commander 1.0.0-6.1.3 - Improper limitation of paths in the getSource function lead to an arbitrary file read vulnerability...

Arbitrary Code Execution

import-in-the-middle is vulnerable to Arbitrary Code Execution. The vulnerability exists due to the lack of sanitization in the getSource function of hook.js, which allows an attacker to inject and execute malicious code in the import function...