CVE-2012-1563

🗓️ 15 Jan 2020 12:59:50Reported by redhatType

cve🔗 web.nvd.nist.gov👁 82 Views🌐 WEB

Joomla! before 2.5.3 security vulnerabilit

Reporter	Title	Published	Views	Family All 10
0day.today	Joomla! 2.5.2 - Admin Creation Exploit	26 Jan 201700:00	–	zdt
Circl	CVE-2012-1563	15 Jan 202016:39	–	circl
Cvelist	CVE-2012-1563	15 Jan 202012:59	–	cvelist
Exploit DB	Joomla! < 2.5.2 - Admin Creation	20 Jan 201700:00	–	exploitdb
EUVD	EUVD-2012-1581	7 Oct 202500:30	–	euvd
exploitpack	Joomla! 2.5.2 - Admin Creation	20 Jan 201700:00	–	exploitpack
NVD	CVE-2012-1563	15 Jan 202013:15	–	nvd
Prion	Design/Logic Flaw	15 Jan 202013:15	–	prion
RedhatCVE	CVE-2012-1563	22 May 202505:54	–	redhatcve
Tenable Nessus	Joomla! < 2.5.4 Multiple Vulnerabilities	31 May 202300:00	–	nessus

NVD

Vulners

Node

joomla joomla!Range<2.5.3

[
  {
    "product": "Joomla!",
    "vendor": "Joomla!",
    "versions": [
      {
        "status": "affected",
        "version": "2.5.2"
      },
      {
        "status": "affected",
        "version": "2.5.1"
      },
      {
        "status": "affected",
        "version": "2.5.0"
      },
      {
        "status": "affected",
        "version": "and all 1.7.x and 1.6.x releases"
      }
    ]
  }
]

Source	Link
openwall	www.openwall.com/lists/oss-security/2012/03/19/11
developer	www.developer.joomla.org/security/news/395-20120303-core-privilege-escalation.html
exploit-db	www.exploit-db.com/exploits/41156/

Parameter	Position	Path	Description	CWE
name	request body	index.php/using-joomla/extensions/components/users-component/registration-form	Registration form data can be manipulated to bypass checks and create an admin-like account.	CWE-269
username	request body	index.php/using-joomla/extensions/components/users-component/registration-form	Registration form data can be manipulated to bypass checks and create an admin-like account.	CWE-269
password1	request body	index.php/using-joomla/extensions/components/users-component/registration-form	Registration form data can be manipulated to bypass checks and create an admin-like account.	CWE-269
password2	request body	index.php/using-joomla/extensions/components/users-component/registration-form	Registration form data can be manipulated to bypass checks and create an admin-like account.	CWE-269
email1	request body	index.php/using-joomla/extensions/components/users-component/registration-form	Registration form data can be manipulated to bypass checks and create an admin-like account.	CWE-269
email2	request body	index.php/using-joomla/extensions/components/users-component/registration-form	Registration form data can be manipulated to bypass checks and create an admin-like account.	CWE-269
groups][	request body	index.php/using-joomla/extensions/components/users-component/registration-form	Registration form data can be manipulated to bypass checks and create an admin-like account.	CWE-269
name	request body	index.php/using-joomla/extensions/components/users-component/registration-form?task=registration.register	Submission endpoint used to create a user account can be abused to forge accounts (including privileged ones) due to improper validation.	CWE-269
username	request body	index.php/using-joomla/extensions/components/users-component/registration-form?task=registration.register	Submission endpoint used to create a user account can be abused to forge accounts (including privileged ones) due to improper validation.	CWE-269
password1	request body	index.php/using-joomla/extensions/components/users-component/registration-form?task=registration.register	Submission endpoint used to create a user account can be abused to forge accounts (including privileged ones) due to improper validation.	CWE-269

21 Nov 2024 01:37Current

7.5High risk

Vulners AI Score7.5

CVSS 25

CVSS 3.17.5

EPSS0.06479

CWE-269