
CVE-2024-50961
Remote attacker can access sensitive data exposed on the URL
data-exfiltrationexploitationinformation-gathering+3
11 year ago

Remote attacker can access sensitive data exposed on the URL

Unauthenticated SQL Injection via Attribute Filter in Phoca Cart - CVSS 9.3

The Joomla extension PhocaCommander is vulnerable to Path Traversal in delete, copy, move actions - CVSS 6.4