Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
freebsdFreeBSD0EBC6E78-7AC6-11E5-B35A-002590263BF5
HistoryOct 22, 2015 - 12:00 a.m.

Joomla! -- Core - SQL Injection/ACL Violation vulnerabilities

2015-10-2200:00:00
vuxml.freebsd.org
20

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.975

Percentile

100.0%

JSON

The JSST and the Joomla! Security Center report:

[20151001] - Core - SQL Injection
Inadequate filtering of request data leads to a SQL Injection
vulnerability.

[20151002] - Core - ACL Violations
Inadequate ACL checks in com_contenthistory provide potential read
access to data which should be access restricted.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchjoomla3= 3.2.0UNKNOWN
FreeBSDanynoarchjoomla3< 3.4.5UNKNOWN

Related

nessus 2
zdt 1
thn 1
metasploit 2
exploitdb 1
dsquare 1
openvas 1
packetstorm 2
joomla 2
prion 4
cve 4
nvd 4
cvelist 4
nuclei 1
impervablog 1
nessus
nessus
FreeBSD : Joomla! -- Core - SQL Injection/ACL Violation vulnerabilities (0ebc6e78-7ac6-11e5-b35a-002590263bf5)
2015-10-26 00:00:00
Joomla! 3.x < 3.4.5 Multiple Vulnerabilities
2015-10-29 00:00:00
zdt
zdt
Joomla Content History SQL Injection Remote Code Execution Exploit
2015-11-21 00:00:00
thn
thn
Joomla 3.4.5 patches Critical SQL Injection Vulnerability
2015-10-22 21:31:00
metasploit
metasploit
Joomla Content History SQLi Remote Code Execution
2015-10-23 10:25:44
Joomla com_contenthistory Error-Based SQL Injection
2015-10-22 20:05:02
exploitdb
exploitdb
Joomla! 3.4.4 Component Content History - SQL Injection / Remote Code Execution (Metasploit)
2015-11-23 00:00:00
dsquare
dsquare
Joomla Core SQLi list[select]
2015-12-22 00:00:00
openvas
openvas
Joomla Core SQL Injection Vulnerability
2015-10-22 00:00:00
packetstorm
packetstorm
Joomla Content History SQL Injection Remote Code Execution
2015-11-20 00:00:00
Joomla com_contenthistory Error-Based SQL Injection
2024-08-31 00:00:00
joomla
joomla
[20151001] - Core - SQL Injection
2015-10-15 00:00:00
[20151002] - Core - ACL Violations
2015-10-15 00:00:00
prion
prion
Sql injection
2015-10-29 20:59:00
Sql injection
2015-10-29 20:59:00
Design/Logic Flaw
2015-10-29 20:59:00
cve
cve
CVE-2015-7297
2015-10-29 20:59:08
CVE-2015-7858
2015-10-29 20:59:12
CVE-2015-7859
2015-10-29 20:59:13
nvd
nvd
CVE-2015-7858
2015-10-29 20:59:12
CVE-2015-7297
2015-10-29 20:59:08
CVE-2015-7859
2015-10-29 20:59:13
cvelist
cvelist
CVE-2015-7297
2015-10-29 20:00:00
CVE-2015-7858
2015-10-29 20:00:00
CVE-2015-7859
2015-10-29 20:00:00
nuclei
nuclei
Joomla! Core SQL Injection
2021-04-07 16:52:11
impervablog
impervablog
SQL Injection Attacks: So Old, but Still So Relevant. Here’s Why (Charts)
2019-06-13 18:38:32

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.975

Percentile

100.0%

JSON
Related for 0EBC6E78-7AC6-11E5-B35A-002590263BF5
nessus2zdt1thn1metasploit2exploitdb1dsquare1openvas1packetstorm2joomla2prion4cve4nvd4cvelist4nuclei1impervablog1