Lucene search
MitreCVE-2011-2892HistoryJul 27, 2011 - 8:55 p.m.
CVE-2011-2892
2011-07-2720:55:03
CWE-20
mitre
web.nvd.nist.gov
28
cve-2011-2892
joomla
clickjacking
vulnerability
nvd
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
6.6
Confidence
Low
EPSS
0.002
Percentile
65.0%
Joomla! 1.6.x before 1.6.2 does not prevent page rendering inside a frame in a third-party HTML document, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site.
Affected configurations
Node
joomlajoomla\!Match1.6alpha
ORjoomlajoomla\!Match1.6alpha2
ORjoomlajoomla\!Match1.6beta1
ORjoomlajoomla\!Match1.6beta10
ORjoomlajoomla\!Match1.6beta11
ORjoomlajoomla\!Match1.6beta12
ORjoomlajoomla\!Match1.6beta13
ORjoomlajoomla\!Match1.6beta14
ORjoomlajoomla\!Match1.6beta15
ORjoomlajoomla\!Match1.6beta2
ORjoomlajoomla\!Match1.6beta3
ORjoomlajoomla\!Match1.6beta4
ORjoomlajoomla\!Match1.6beta5
ORjoomlajoomla\!Match1.6beta6
ORjoomlajoomla\!Match1.6beta7
ORjoomlajoomla\!Match1.6beta8
ORjoomlajoomla\!Match1.6beta9
ORjoomlajoomla\!Match1.6rc1
ORjoomlajoomla\!Match1.6.0
ORjoomlajoomla\!Match1.6.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| joomla | joomla\! | 1.6 | cpe:2.3:a:joomla:joomla\!:1.6:alpha:*:*:*:*:*:* |
| joomla | joomla\! | 1.6 | cpe:2.3:a:joomla:joomla\!:1.6:alpha2:*:*:*:*:*:* |
| joomla | joomla\! | 1.6 | cpe:2.3:a:joomla:joomla\!:1.6:beta1:*:*:*:*:*:* |
| joomla | joomla\! | 1.6 | cpe:2.3:a:joomla:joomla\!:1.6:beta10:*:*:*:*:*:* |
| joomla | joomla\! | 1.6 | cpe:2.3:a:joomla:joomla\!:1.6:beta11:*:*:*:*:*:* |
| joomla | joomla\! | 1.6 | cpe:2.3:a:joomla:joomla\!:1.6:beta12:*:*:*:*:*:* |
| joomla | joomla\! | 1.6 | cpe:2.3:a:joomla:joomla\!:1.6:beta13:*:*:*:*:*:* |
| joomla | joomla\! | 1.6 | cpe:2.3:a:joomla:joomla\!:1.6:beta14:*:*:*:*:*:* |
| joomla | joomla\! | 1.6 | cpe:2.3:a:joomla:joomla\!:1.6:beta15:*:*:*:*:*:* |
| joomla | joomla\! | 1.6 | cpe:2.3:a:joomla:joomla\!:1.6:beta2:*:*:*:*:*:* |
Related
nvd
nvd
CVE-2011-2892
2011-07-27 20:55:03
prion
prion
Hardcoded credentials
2011-07-27 20:55:00
cvelist
cvelist
CVE-2011-2892
2011-07-27 20:00:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
6.6
Confidence
Low
EPSS
0.002
Percentile
65.0%
Related for CVE-2011-2892