HOMEVULNERABILITIESVENDORSAcyba

AcybaCVEs & Vulnerabilities

5 CVEs affecting Acyba products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.

5 CVEs→ All vendors

Most Affected Products

acymailing 3acymailing starter 1acysms 1
CVE-2023-39970CRITICAL

Unrestricted Upload of File with Dangerous Type vulnerability in AcyMailing component for Joomla. It allows remote code execution.

18 Aug 2023
9.8
CVSS
CVE-2020-10934HIGH

Acyba AcyMailing before 6.9.2 mishandles file uploads by admins.

24 Mar 2020
7.2
CVSS
CVE-2015-7338HIGH

SQL Injection exists in AcyMailing Joomla Component before 4.9.5 via exportgeolocorder in a geolocation_longitude request to index.php.

9 Mar 2020
7.2
CVSS
CVE-2018-9107HIGHpoc

CSV Injection (aka Excel Macro Injection or Formula Injection) exists in the export feature in the Acyba AcyMailing extension before 5.9.6 for Joomla! via a value that is mishandled in a CSV export.

28 Mar 2018
8.8
CVSS
CVE-2018-9106HIGHpoc

CSV Injection (aka Excel Macro Injection or Formula Injection) exists in the export feature in the Acyba AcySMS extension before 3.5.1 for Joomla! via a value that is mishandled in a CSV export.

28 Mar 2018
8.8
CVSS
← PrevPage 1 / 1Next →
← All Vendors·CVE Database
Acyba CVEs & Vulnerabilities — 5 Tracked