CVE-2024-5735 - CVE House
Back to Database
Status published Medium CVE-2024-5735

Full Path Disclosure in AdmirorFrames Joomla! Extension

Vulnerability Description

Full Path Disclosure vulnerability in AdmirorFrames Joomla! extension in afHelper.php script allows an unauthorised attacker to retrieve location of web root folder. This issue affects AdmirorFrames: before 5.0.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-5735

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Marcin Wyczechowski [AFINE Team]
  • Michał Majchrowicz [AFINE Team]

References

More from Nikola Vasilijevski

View All →
CVE-2024-5737
HTML Injection in AdmirorFrames Joomla! Extension
Medium 6.3
CVE-2024-5736
SSRF in AdmirorFrames Joomla! Extension
High 8.2

Affected Vendor

Nikola Vasilijevski

View all reports →

Affected Software

AdmirorFrames
Vulnerable Versions:
0

Timeline

Official Publish: June 28th, 2024
Last Modified: August 1st, 2024
Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

CWE-497

MITRE ATT&CK TTPs

T1592 Gather Victim Host Information
Reconnaissance
T1082 System Information Discovery
Discovery
T1005 Data from Local System
Collection
T1552 Unsecured Credentials
Credential Access
T1041 Exfiltration Over C2 Channel
Exfiltration