Search Results (5 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-66493 1 Phoca 1 Phoca Commander Extension For Joomla 2026-08-08 N/A
Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.3 - Improper limitation of paths for delete, copy and move actions lead to path traversal vulnerabilities.
CVE-2026-66492 1 Phoca 1 Phoca Commander Extension For Joomla 2026-08-08 N/A
Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.3 - Improper limitation of paths in the file upload action lead to path a traversal vulnerability.
CVE-2026-66491 1 Phoca 1 Phoca Commander Extension For Joomla 2026-08-08 N/A
Joomla Extension - phoca.cz - Arbitrary File Read in Phoca Commander 1.0.0-6.1.3 - Improper limitation of paths in the getSource function lead to an arbitrary file read vulnerability.
CVE-2026-65764 1 Phoca 1 Phoca Commander Extension For Joomla 2026-07-27 N/A
Joomla Extension - phoca.cz - Reflected XSS vulnerability in Phoca Commander 5.0.0-6.1.1 - Improper validation of user inputs lead to a reflective XSS vulnerability.
CVE-2026-65765 1 Phoca 1 Phoca Commander Extension For Joomla 2026-07-27 N/A
Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.1 - Improper limitation of paths for save and download actions lead to path traversal vulnerabilities.