CVE-2015-7338

The CVE refers to an SQL Injection in the AcyMailing Joomla Component prior to version 4.9.5, triggered by an exportgeolocorder parameter in a geolocation_longitude request to index.php. The vulnerability affects the component used within Joomla installations and can allow an attacker to manipula...

CVE-2018-9107

CVE-2018-9107 affects the Joomla! AcyMailing extension (Acymailing) before 5.9.6, where the CSV export feature mishandles a value in the exported data, enabling CSV/Excel macro injection (CSV Injection). Public references describe an attack method for Acymailing Starter 5.9.5 and report CVE-2018-...

CVE-2020-10934

CVE-2020-10934 affects the Joomla! plugin "AcyMailing" prior to version 6.9.2. The root cause is mishandling of file uploads by admins, allowing an attacker to upload arbitrary files (CWE-434) and potentially execute arbitrary PHP code. Affected software: AcyMailing; vulnerable component: file up...