Rereplacer Pro Extension For Joomla
Monthly
Unauthenticated remote file disclosure in ReReplacer Pro extension for Joomla allows attackers to read arbitrary files outside the site directory via path traversal in XML include paths. The vulnerability affects versions 1.0.0 through 15.0.3 and has a CVSS 3.1 score of 7.5 (high confidentiality impact). No public exploit code or active exploitation has been reported, and EPSS indicates a very low probability of widespread exploitation.
Database field disclosure in four Regular Labs Joomla extensions - Advanced Module Manager, Conditional Content, Content Templater, and ReReplacer - allows an authenticated high-privilege user to read arbitrary database fields outside the intended scope. The Conditions editor feature accepts user-supplied database table and column names from the HTTP request, which are quoted as SQL identifiers (preventing SQL injection) but are not restricted to the tables and columns supported by Regular Labs integrations. An attacker with administrative access can therefore query unrelated database fields, potentially exposing sensitive Joomla database content such as user records or configuration values. No public exploit code or active exploitation is identified at time of analysis.
Unauthenticated remote file disclosure in ReReplacer Pro extension for Joomla allows attackers to read arbitrary files outside the site directory via path traversal in XML include paths. The vulnerability affects versions 1.0.0 through 15.0.3 and has a CVSS 3.1 score of 7.5 (high confidentiality impact). No public exploit code or active exploitation has been reported, and EPSS indicates a very low probability of widespread exploitation.
Database field disclosure in four Regular Labs Joomla extensions - Advanced Module Manager, Conditional Content, Content Templater, and ReReplacer - allows an authenticated high-privilege user to read arbitrary database fields outside the intended scope. The Conditions editor feature accepts user-supplied database table and column names from the HTTP request, which are quoted as SQL identifiers (preventing SQL injection) but are not restricted to the tables and columns supported by Regular Labs integrations. An attacker with administrative access can therefore query unrelated database fields, potentially exposing sensitive Joomla database content such as user records or configuration values. No public exploit code or active exploitation is identified at time of analysis.