CVSS base score
CVSS vector
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/AU:Y/R:U/V:D/RE:L/U:Green
What the vulnerability does
Full Path Disclosure vulnerability in AdmirorFrames Joomla! extension in afHelper.php script allows an unauthorised attacker to retrieve location of web root folder. This issue affects AdmirorFrames: before 5.0.
Explanation of Vulnerability in Simple Terms
AdmirorFrames versions before 5.0 contain an exposure of sensitive information vulnerability. An attacker on the network can access restricted data without authentication, though exploitation requires specific conditions. The vulnerability has low confidentiality impact and does not affect data integrity or availability. Update to version 5.0 or later to resolve this issue.
What an attacker can do
Access sensitive information from the application without authentication.
Potential impact on your site
Sensitive data may be exposed to unauthenticated attackers if the application is internet-facing.
Conditions required to exploit
Network access; specific conditions must be met (attack complexity is high).
Key dates
External resources
Related vulnerabilities
