Two vulnerabilities have been reported in Mosets Tree component for Joomla!, which can be exploited by malicious users to bypass certain security restrictions.

1) The component allows users to overwrite other users' listings. No further information is currently available.

2) The component allows a certain unspecified read-only front-end field to be overwritten. No further information is currently available.

The vulnerabilities are reported in versions prior to 2.1.8.

Solution
Update to version 2.1.8.

Provided and/or discovered by
Reported by the vendor.

Original Advisory
Mosets Tree:
http://forum.mosets.com/showthread.php?t=17064

Deep Links
Links available to Secunia VIM customers