cve/2024/CVE-2024-5735.md

CVE-2024-5735

Description

Full Path Disclosure vulnerability in AdmirorFrames Joomla! extension in afHelper.php script allows an unauthorised attacker to retrieve location of web root folder. This issue affects AdmirorFrames: before 5.0.

POC

Reference

No PoCs from references.

Github

• https://github.com/afine-com/CVE-2024-5735
• https://github.com/afine-com/CVE-2024-5736
• https://github.com/afine-com/CVE-2024-5737
• https://github.com/afine-com/research
• https://github.com/nomi-sec/PoC-in-GitHub