Skip to content
OpenAdvisories
Medium · 6.9 CVE-2026-65765 EUVD-2026-49128GHSA-c8m7-7389-gq73

Joomla Extension - phoca.cz - Path traversal vulnerability in Phoca Commander 1.0.0-6.1.1

Published Jul 27, 2026 · Updated Jul 27, 2026 · Assigned by Joomla

Description

Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.1 - Improper limitation of paths for save and download actions lead to path traversal vulnerabilities.

Affected products

VendorProductAffectedFixed
phoca.cz Phoca Commander extension for Joomla 1.0.0-6.1.1 —

References