Approved changes feed: RSS · Atom

cpe:2.3:a:regularlabs.com:db_replacer_extension_for_joomla:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorRegularlabs.Com (738da9fd-b178-52c4-917b-e11dbc67f76c)
ProductDb Replacer Extension For Joomla (4adbbb6a-88d9-5621-9470-7813e308eab5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-63685 vulnerable 2026-07-29 01:06:19.432888 Joomla Extension - regularlabs.com - Authorization bypass in DB Replacer extension
Joomla Extension - regularlabs.com - Authorization bypass in DB Replacer extension - Administrator routes and replacement requests did not consistently require Super User permission and a valid token. An unauthorized backend user or CSRF attack could perform database replacements, potentially causing major data corruption or site compromise.
Published: 2026-07-22T20:43:30.967Z
Updated: 2026-07-28T05:34:50.869Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-63265 vulnerable 2026-07-29 01:06:19.366755 Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various Regular Labs extension AJAX endpoints
Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various Regular Labs extension AJAX endpoints - Privileged Regular Labs AJAX endpoints did not consistently require valid CSRF tokens, matching component/item permissions and trusted server-generated form configuration. Authenticated lower-privileged users or CSRF attacks could invoke lookups or mutations outside their authorization.
Published: 2026-07-22T20:44:05.164Z
Updated: 2026-07-28T05:35:26.645Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.