CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in mojoomla WPAMS apartment-management allows PHP Local File Inclusion.This issue affects WPAMS: from n/a through <= 44.0.
Explanation of Vulnerability in Simple Terms
WPAMS for Joomla versions 44.0 and earlier contain a critical vulnerability that allows unauthenticated attackers to read sensitive data, modify site content, and disrupt service without any user interaction. The vulnerability stems from improper input validation (CWE-98) and can be exploited remotely over the network. All sites running WPAMS should update immediately.
What an attacker can do
Read sensitive data, modify or delete content, and disrupt site availability without authentication.
Potential impact on your site
Your Joomla site's data, content, and availability are at immediate risk if WPAMS is installed and unpatched.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
