CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS
Percentile
99.4%
The JSST and the Joomla! Security Center report:
[20140903] - Core - Remote File Inclusion
Inadequate checking allowed the potential for remote files to be
executed.
[20140904] - Core - Denial of Service
Inadequate checking allowed the potential for a denial of service
attack.
developer.joomla.org/security-centre/595-20140903-core-remote-file-inclusion.html
developer.joomla.org/security-centre/596-20140904-core-denial-of-service.html
www.joomla.org/announcements/release-news/5566-joomla-2-5-26-released.html
www.joomla.org/announcements/release-news/5567-joomla-3-3-5-released.html