Veille CVE

Recherche « Phoca download »

4 CVE

Critique 0 Élevée 2 Moyenne 2 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Phoca download » ✕
  1. CVE-2026-102775 7.5 Élevée

    phoca.cz Phoca Cart extension for Joomla · Phoca phoca cart

    Joomla Extension - phoca.cz - Authorisation bypass through user-controlled key (IDOR) in Order View in Phoca Cart 5.0.0 - 6.1.8 - Phoca Cart's order-file download endpoint does not verify the download tokens it asks for. The d (download token) and o (order token) parameters are checked for non-emptiness only — they are never compared to the stored download_token / order_token values. As a result, any remote user (including a guest with no account at all) can download any customer's digital goods by enumerating sequential id values and supplying arbitrary non-empty tokens.

  2. CVE-2026-76569 5.3 Moyenne

    phoca.cz Phoca Download extension for Joomla

    Joomla Extension - phoca.cz - Reflected XSS via the search GET parameter in Phoca Download 5.0.0-6.1.4

  3. CVE-2026-65765 6.9 Moyenne

    phoca.cz Phoca Commander extension for Joomla

    Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.1 - Improper limitation of paths for save and download actions lead to path traversal vulnerabilities.

  4. CVE-2026-57828 8.8 Élevée

    phoca.cz Phoca Download extension for Joomla · Phoca download

    Joomla Extension - phoca.cz - Authenticated file upload in Phoca Downloads component < 6.1.3 - The Joomla extension Phoca Downloads is vulnerable to an authenticated arbitrary file upload that allows registered users uploading executable files and leads to full RCE.