Security
Headlines
HeadlinesLatestCVEs

Headline

CVE-2023-39970: AcyMailing Starter, by Acyba - Joomla Extension Directory

Unrestricted Upload of File with Dangerous Type vulnerability in AcyMailing component for Joomla. It allows remote code execution.

CVE
#vulnerability#web#ios#amazon#rce

Introduction

  • Full description

  • Reviews (547)

  • Other extension (1)

  • Easily include Joomla Articles and any user information in your newsletters

  • Let users subscribe to your newsletters on your Joomla registration form

  • No HTML knowledge required, enjoy the Newsletter creation with our drag and drop editor

  • Subscription form builder

  • Real time send process using a queue system with throttling enabling you to overcome any server limitation!

  • Record the User IP to stay compliant with all countries laws

  • Double opt-in and automatic unsubscribe link

  • CAN-SPAM compliant

  • GDPR compliant

  • Validation and Confirmation of the email address

  • Mass Subscription using filters and mass actions

  • Automatic synchronisation with your Joomla Users

  • Social medias share options

  • Newsletter template management including 3 responsive newsletter-templates out of the box

  • Automatic inline-css conversion for mail client compatibility

  • Attachment capability, Embedded images option

  • Newsletter Statistics management (Number of Sent / Opened / clicked…)

  • Advanced Newsletter statistics (who opened your Newsletter and when)

  • Front-End newsletter archive section

  • Profile menu item to let users manage their subscriptions

  • Handle SMTP Secured Connections (you can use GMail to send your newsletters)

  • Plug AcyMailing to an external delivery service such as Mandrill, SendGrid, ElasticEmail, Amazon SES…

  • Administrator/User Notifications

  • Fully multilingual interfaces

AcyMailing uses the Joomla MVC model to let you customize any view.
AcyMailing is translated in 60 languages!

Functionality

Very versatile and easy to adapt for any type of use and many add-ons for other Joomla extensions.

Ease of use

It takes some getting used to but once you know the basics it is easy to configure and use.

Support

Top support, very quick answer and solution via the forum or ticket system.

Documentation

Very extensive description and documentation and forum, but necessary.

I used this to: I used this to: I use it to send emails when new articles, events or documents appear. Users can subscribe and unsubscribe from the newsletters.

Functionality

Acyba 5 to 6/7 is the worst upgrade ever. Lost lot of functionality (f.e.: add more articles in a newsletter in one step)

Ease of use

very complex. With Acyba 5 it was easy to create an newsletter in less minutes. But with Acyba 6/7 you spend hours without success

I used this to: Sending newsletter to 10,000 peoples.
Insert existing articles in the newsletter

Functionality

Very powerful with plenty of options, have used for many years. Enterprise membership provides front end functionality, which is excellent.

Ease of use

Some idiosyncrasies in naming of functions that make it less intuitive than it could be, but pretty good overall.

Support

Big watchout. Support weak and weirdly touchy. No tracking of support tickets. Got suspended from forum for pointing out lack of response.

Documentation

Has improved but not always keeping up with changes. Would say I find what I need quickly about 70% of the time.

I used this to: Managing mailing lists, newsletters and membership comms for a Society.
Assigning send roles to others from front end.

Functionality

It worked 9 years ago (Enterprise version, exorbitant cost). Since 2018 after purchasing upgraded version it stopped working.

Ease of use

It has all the ease to send emails but when your emails are not opened even 3% then it has neither ease nor result.

Support

Alexandre has no help to offer. He says: o unfortunately I’ve no “way” to rectify something as it might comes from tons of different reasons

Documentation

No manual available to help how to make sure of delivery of the emails as mails sent to me was also not received.

I used this to: Sending news emails to clients. No question to by new version if there has been bad experience.

Functionality

I must admit that this is not a tool that I just installed. It is a tool that I have been using for over 10 years. It works great!

Ease of use

It is very easy to use once you get used to it. I have to say that this review is for the product acymailing essential. That is I paid 29 €

Support

Support is great. At least for the paying version. It is worth every cent.

Documentation

It is pretty self-explanatory everything. I am not sure if there is a documentation site, but at least, I did not need it.

I used this to: I used it for 10 years. We do not want to use services like mailchimp or others, cause that would mean that We would need to transfer e-mail addresses of our subscribers to an external provider, which we are not allowed, following the GDPR Directive.

Functionality

I have us this extension for many years and it dose it jobb, and the hav don lots of improvment

Ease of use

It is a littl learning curve to star with. And the settings taks some time to do.

Support

I ask for discount they only offer to rice the price!
I have 3 price plans for 3 sites, the same product.
109,47€ / y
89,00€ / y
67,00€ / y

Documentation

I am happy with the documentation is good and it is easy to follow

I used this to: As I weekley reminder for my activity, and som newsletter per year.

Functionality

Very powerful component with a lot of possibilities to customize.

Ease of use

Quite easy to use but V7 logic is very different from V5. So it needs a little time to learn the new way to it works

Support

Support is very good and you can buy specific developpment for your needs.

Documentation

Documentation is very precise. And if you don’t get answer to your question, forum is very active.

I used this to: Send weekly newsletter and automatic newsletter depending on the published content.

Functionality

It’s fine, but the editor is rather useless especially for mobile. You can’t edit columns or breakpoints at all. Only option is custom html.

Ease of use

Because the editor is very limited, you have to code everything. This defeats the purpose of using the component given other alternatives.

Documentation

Documentation is there, had nothing on the topics I was searching for.

I used this to: Just for testing, will not use this for production. Worth mentioning I was looking at the enterprise version of 7.7.4.

Functionality

It’s functions well. I am only giving stars because V6 removed the frontend newsletter archive.

Ease of use

It is very easy to use, I really like the newsletter template editor.

Support

Support is good. Their team gets back to me when I need help with something.

I used this to: Sending out my own newsletters. At the peak of their popularity I had 20k subscribers and ACYmailing managed and handled that great. I have used it for well over 10 years now.

Functionality

It is a great extension for mailing and newsletter subscription. It has all i need

Ease of use

Not very easy but you must be careful and read the descriptions. I think it not related with extension and it is me that i must learn more.

Support

I like the working forum and ticketing. There is a huge community behind.

Documentation

Good documentation. I need everything at documentation. I used it for easy setup.

I used this to: I used this for my website about my flower shop. People can easily subscribe to newsletter.

CVE: Latest News

CVE-2023-50976: Transactions API Authorization by oleiman · Pull Request #14969 · redpanda-data/redpanda
CVE-2023-6905
CVE-2023-6903
CVE-2023-6904
CVE-2023-3907