Threats tagged 'ghsa-973f-5427-fq29'

An improper access control vulnerability exists in the cmsjunkie.com J-BusinessDirectory extension for Joomla versions 1.0.0 through 6.2.2. This flaw allows unauthenticated attackers to take over ownership of listings by supplying arbitrary company and user IDs, even for listings that already have an owner. Version 6.2.3 fixes this issue by restricting the action to authenticated users and only permitting ownership changes for unowned listings.