Approved changes feed: RSS · Atom

cpe:2.3:a:regularlabs.com:geoip_extension_for_joomla:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorRegularlabs.Com (738da9fd-b178-52c4-917b-e11dbc67f76c)
ProductGeoip Extension For Joomla (caaa0a50-cf5f-5482-b474-f946985aadb7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-65431 vulnerable 2026-07-29 01:06:19.975134 Joomla Extension - regularlabs.com - Zipslip in GeoIP extension
Joomla Extension - regularlabs.com - Zipslip in GeoIP extension - Geo IP database update archives have been broadly extracted without path validation, leading to unsafe file extractions.
Published: 2026-07-23T09:09:37.365Z
Updated: 2026-07-28T05:30:43.017Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-65430 vulnerable 2026-07-29 01:06:19.975011 Joomla Extension - regularlabs.com - MaxMind Credential leakage in GeoIP extension
Joomla Extension - regularlabs.com - MaxMind Credential leakage in GeoIP extension - MaxMind credentials where leaked in request URLs, causing a credential leakage vulnerability.
Published: 2026-07-23T09:10:32.150Z
Updated: 2026-07-27T13:47:43.782Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-64876 vulnerable 2026-07-29 01:06:19.897335 Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in GeoIP extension
Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in GeoIP extension - Database-update requests lacked consistent token and Super User checks, this could cause unauthorized updates.
Published: 2026-07-23T09:12:50.726Z
Updated: 2026-07-29T05:38:42.253Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-64875 vulnerable 2026-07-29 01:06:19.897236 Joomla Extension - regularlabs.com - IP spoofing vulnerability in GeoIP extension
Joomla Extension - regularlabs.com - IP spoofing vulnerability in GeoIP extension - GeoIP lookups trusted spoofable forwarded client-IP headers, this could cause GeoIP-rule bypass.
Published: 2026-07-23T09:13:55.404Z
Updated: 2026-07-27T13:32:38.703Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-63265 vulnerable 2026-07-29 01:06:19.373536 Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various Regular Labs extension AJAX endpoints
Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various Regular Labs extension AJAX endpoints - Privileged Regular Labs AJAX endpoints did not consistently require valid CSRF tokens, matching component/item permissions and trusted server-generated form configuration. Authenticated lower-privileged users or CSRF attacks could invoke lookups or mutations outside their authorization.
Published: 2026-07-22T20:44:05.164Z
Updated: 2026-07-28T05:35:26.645Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.