CVE-2024-5735

CVE-2024-5735 describes a Full Path Disclosure in the AdmirorFrames Joomla! extension, allowing an unauthenticated attacker to retrieve the web root folder location via afHelper.php. Affected: AdmirorFrames before 5.0. The connected sources confirm the vulnerability exists and reference the affec...

CVE-2024-5737

CVE-2024-5737 affects the AdmirorFrames Joomla! extension. Red Hat entries confirm the issue resides in afGdStream.php, which does not set a Content-Type, causing a default text/html to be used. An attacker may embed HTML in image data, which will be rendered by a webpage as HTML. The vulnerabili...

CVE-2024-5736

AdmirorFrames Joomla! extension (afGdStream.php) is affected by CVE-2024-5736. A Server Side Request Forgery (SSRF) condition in afGdStream.php allows an attacker to access local files or server pages that are available only from localhost. The issue affects AdmirorFrames before version 5.0. The ...