vendor:
JoomProject
by:
Ihsan Sencan
4.3
CVSS
MEDIUM
Information Disclosure
200
CWE
Product Name: JoomProject
Affected Version From: 1.1.3.2
Affected Version To: 1.1.3.2
Patch Exists: YES
Related CWE: N/A
CPE: a:joomboost:joomproject:1.1.3.2
Metasploit:
N/A
Other Scripts:
N/A
Platforms Tested: WiN7_x64/KaLiLinuX_x64
2019
Joomla! Component JoomProject 1.1.3.2 – Information Disclosure
A vulnerability in Joomla! Component JoomProject 1.1.3.2 allows an attacker to gain access to sensitive information such as user IDs, names, and emails. This is achieved by sending a specially crafted HTTP request to the vulnerable server, which will return a JSON response containing the sensitive information.
Mitigation:
Upgrade to the latest version of Joomla! Component JoomProject.
