Sign in Free account Free scan

lomart records

4 published records for vendor lomart.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

26

Bar: total · dark part: CISA KEV.

Recurring classes

CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2
CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
CWE-94 Improper Control of Generation of Code ('Code Injection')1

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

4 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
40Plan	CVE-2026-97163Proof of concept	Joomla Extension - lomart.fr - Unauthenticated remote code installation in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29lomart · up · CWE-22 Pre-auth Path traversal	Critical10.0	—	0.4%	Sep 26, 2026
37Monitor	CVE-2026-97160Proof of concept	Joomla Extension - lomart.fr - Authenticated, privileged PHP command injection in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29lomart · up · CWE-94 RCE Command injection	Critical9.4	—	1.3%	Sep 26, 2026
36Monitor	CVE-2026-97161Proof of concept	Joomla Extension - lomart.fr - Various path traversal / file access vectors in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29lomart · up · CWE-22 Pre-auth Path traversal	Critical9.2	—	0.4%	Sep 26, 2026
33Monitor	CVE-2026-97162No exploit	Joomla Extension - lomart.fr - Various SQL injection vectors in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29lomart · up · CWE-89 Pre-auth SQL injection	High8.3	—	0.3%	Sep 26, 2026

CVE-2026-97163
40Plan
Joomla Extension - lomart.fr - Unauthenticated remote code installation in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29
CriticalCVSS 10.0Proof of conceptEPSS 0%
- Pre-auth
- Path traversal
lomart · upSep 26, 2026
CVE-2026-97160
37Monitor
Joomla Extension - lomart.fr - Authenticated, privileged PHP command injection in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29
CriticalCVSS 9.4Proof of conceptEPSS 1%
- RCE
- Command injection
lomart · upSep 26, 2026
CVE-2026-97161
36Monitor
Joomla Extension - lomart.fr - Various path traversal / file access vectors in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29
CriticalCVSS 9.2Proof of conceptEPSS 0%
- Pre-auth
- Path traversal
lomart · upSep 26, 2026
CVE-2026-97162
33Monitor
Joomla Extension - lomart.fr - Various SQL injection vectors in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29
HighCVSS 8.3No exploitEPSS 0%
- Pre-auth
- SQL injection
lomart · upSep 26, 2026