Joomla · Joomanager · CVE-2017-18345
Name of the Vulnerable Software and Affected Versions:
Joomanager component for Joomla! versions through 2.0.0
Description:
The issue allows for arbitrary file download, which can expose database credentials. This can be achieved through a request to "index.php?option=com joomanager&controller=details&task=download&path=configuration.php".
Recommendations:
For Joomanager component for Joomla! versions through 2.0.0, update to a version later than 2.0.0 to resolve the issue.