← Back

Acyba

acyba

5 CVEs • 3 products

Products (3)

Click to collapse
Toggle
Acymailing
acymailing
3 CVEs
Acysms
acysms
1 CVE
Acymailing Starter
acymailing_starter
1 CVE

CVEs (5)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-39970
1Acyba
1Acymailing Starter
Jun 17, 2026
Aug 17, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Unrestricted Upload of File with Dangerous Type vulnerability in AcyMailing component for Joomla. It allows remote code execution.
CVE-2020-10934
1Acyba
1Acymailing
Jun 17, 2026
Mar 24, 2020
N/A· v4
7.2 HIGH· v3
6.5 MEDIUM· v2
Acyba AcyMailing before 6.9.2 mishandles file uploads by admins.
CVE-2015-7338
1Acyba
1Acymailing
Nov 21, 2024
Mar 9, 2020
N/A· v4
7.2 HIGH· v3
6.5 MEDIUM· v2
SQL Injection exists in AcyMailing Joomla Component before 4.9.5 via exportgeolocorder in a geolocation_longitude request to index.php.
CVE-2018-9107
1Acyba
1Acymailing
Jun 17, 2026
Mar 28, 2018
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
CSV Injection (aka Excel Macro Injection or Formula Injection) exists in the export feature in the Acyba AcyMailing extension before 5.9.6 for Joomla! via a value that is mishandled in a CSV export.
CVE-2018-9106
1Acyba
1Acysms
Jun 17, 2026
Mar 28, 2018
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
CSV Injection (aka Excel Macro Injection or Formula Injection) exists in the export feature in the Acyba AcySMS extension before 3.5.1 for Joomla! via a value that is mishandled in a CSV export.