Skip to content
OpenAdvisories

Vendor

cmsjunkie.com

8 known vulnerabilities.

2 results · Clear filters · Feed

  • High 7.5

    Joomla Extension - cmsjunkie.com - Open mail relay in J-BusinessDirectory < 6.2.3

    Joomla Extension - cmsjunkie.com - Open mail relay in J-BusinessDirectory < 6.2.3 - Recipient address was taken from the request (contact_id_offer / contact_id_event) instead of the server-side offer/event record, so mail could be sent to an arbitrary address.

  • High 8.7

    Joomla Extension - cmsjunkie.com - DOS vector in pagination parameter handling in J-BusinessDirectory < 6.2.3

    Joomla Extension - cmsjunkie.com - DOS vector in pagination parameter handling in J-BusinessDirectory < 6.2.3 - Pagination values were not strictly typed. Array/non-numeric values (for example limitstart[]) could trigger PHP type errors in arithmetic, and lim…