CVE-2017-18345

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

The Joomanager component through 2.0.0 for Joomla! has an arbitrary file download issue, resulting in exposing the credentials of the database via an index.php?option=com_joomanager&controller=details&task=download&path=configuration.php request.

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-200

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://cxsecurity.com/issue/WLB-2018030054Exploit, Third Party Advisory
https://vel.joomla.org/vel-blog/2020-joomanager-2-0-0-otherMitigation, Vendor Advisory
https://www.exploit-db.com/exploits/44252Exploit, Third Party Advisory, VDB Entry
https://cxsecurity.com/issue/WLB-2018030054Exploit, Third Party Advisory
https://vel.joomla.org/vel-blog/2020-joomanager-2-0-0-otherMitigation, Vendor Advisory
https://www.exploit-db.com/exploits/44252Exploit, Third Party Advisory, VDB Entry

Timeline

Published: Aug 26, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-183469.8SQL injection vulnerability in /wbg/core/_includes/authorization.inc.php in CMS Web-Gooroo through 2013-01-19 allows remote attackers to exe CVE-2017-183474.6Incorrect access control in RDP Level 1 on STMicroelectronics STM32F0 series devices allows physically present attackers to extract the devi CVE-2017-183487.0Splunk Enterprise 6.6.x, when configured to run as root but drop privileges to a specific non-root account, allows local users to gain privi CVE-2017-183499.8parseObject in Fastjson before 1.2.25, as used in FastjsonEngine in Pippo 1.11.0 and other products, allows remote attackers to execute arbi CVE-2017-183505.9bitcoind and Bitcoin-Qt prior to 0.15.1 have a stack-based buffer overflow if an attacker-controlled SOCKS proxy server is used. This result CVE-2017-183526.1Error reporting within Rendertron 1.0.0 allows reflected Cross Site Scripting (XSS) from invalid URLs.CVE-2017-183537.5Rendertron 1.0.0 includes an _ah/stop route to shutdown the Chrome instance responsible for serving render requests to all users. Visiting t CVE-2017-183547.5Rendertron 1.0.0 allows for alternative protocols such as 'file://' introducing a Local File Inclusion (LFI) bug where arbitrary files can b CVE-2017-183557.5Installed packages are exposed by node_modules in Rendertron 1.0.0, allowing remote attackers to read absolute paths on the server by examin CVE-2017-183568.8In the Automattic WooCommerce plugin before 3.2.4 for WordPress, an attack is possible after gaining access to the target site with a user a CVE-2017-183576.5Shopware before 5.3.4 has a PHP Object Instantiation issue via the sort parameter to the loadPreviewAction() method of the Shopware_Controll CVE-2017-183586.1LimeSurvey before 2.72.4 has Stored XSS by using the Continue Later (aka Resume later) feature to enter an email address, which is mishandle