Joomla! ChronoForums 2.0.11 - Local File Inclusion
Joomla! ChronoForums 2.0.11 avatar function is vulnerable to local file inclusion through unauthenticated path traversal attacks. This enables an attacker to read arbitrary files, for example the Joomla! configuration file which contains credentials.
chronoforumsPoC 已收录
CVSS5.3EPSS 46.1%