CVE-2017-18345

PoC ×2—

CVSS 3.0

9.8 critical

EPSS

3%p86

Published

Aug 26, 2018 (Aug 26, 2018)

Modified

Jun 17, 2026

Description

The Joomanager component through 2.0.0 for Joomla! has an arbitrary file download issue, resulting in exposing the credentials of the database via an index.php?option=com_joomanager&controller=details&task=download&path=configuration.php request.

Vendors: joomanager project
Products: joomanager
Ecosystems: Joomla
Weakness: CWE-200
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (3.0%)

In the news0 stories

No ingested article mentions this CVE yet.