Lucene search
Open Source Matters, Inc.JOOMLA-637HistoryDec 13, 2015 - 12:00 a.m.
[20151205] - Session - Remote Code Execution Vulnerability
2015-12-1300:00:00
Open Source Matters, Inc.
developer.joomla.org
105
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS
0.018
Percentile
88.3%
Browser information is not filtered properly while saving the session values which leads to a Remote Code Execution vulnerability.
Affected configurations
Node
joomlajoomla\!Range<1.3.1
Related
prion
prion
Session fixation
2015-12-16 21:59:00
cvelist
cvelist
CVE-2015-8566
2015-12-16 21:00:00
friendsofphp
friendsofphp
Remote Code Execution Vulnerability
2015-12-14 18:22:25
cve
cve
CVE-2015-8566
2015-12-16 21:59:11
nvd
nvd
CVE-2015-8566
2015-12-16 21:59:11
osv
osv
Joomla! Framework Remote Code Injection Vulnerability
2022-05-17 04:00:55
github
github
Joomla! Framework Remote Code Injection Vulnerability
2022-05-17 04:00:55
exploitdb
exploitdb
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS
0.018
Percentile
88.3%
Related for JOOMLA-637