CVE-2013-1453

2013-02-1301:55:05

[email protected]

web.nvd.nist.gov

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.4

Confidence

Low

EPSS

0.003

Percentile

66.3%

JSON

plugins/system/highlight/highlight.php in Joomla! 3.0.x through 3.0.2 and 2.5.x through 2.5.8 allows attackers to unserialize arbitrary PHP objects to obtain sensitive information, delete arbitrary directories, conduct SQL injection attacks, and possibly have other impacts via the highlight parameter. Note: it was originally reported that this issue only allowed attackers to obtain sensitive information, but later analysis demonstrated that other attacks exist.

Affected configurations

Nvd

Node

joomlajoomla\!Match2.5.0

joomlajoomla\!Match2.5.1

joomlajoomla\!Match2.5.2

joomlajoomla\!Match2.5.3

joomlajoomla\!Match2.5.4

joomlajoomla\!Match2.5.5

joomlajoomla\!Match2.5.6

joomlajoomla\!Match2.5.7

joomlajoomla\!Match2.5.8

joomlajoomla\!Match3.0.0

joomlajoomla\!Match3.0.1

joomlajoomla\!Match3.0.2

VendorProductVersionCPE
joomlajoomla\!2.5.0cpe:2.3:a:joomla:joomla\!:2.5.0:*:*:*:*:*:*:*
joomlajoomla\!2.5.1cpe:2.3:a:joomla:joomla\!:2.5.1:*:*:*:*:*:*:*
joomlajoomla\!2.5.2cpe:2.3:a:joomla:joomla\!:2.5.2:*:*:*:*:*:*:*
joomlajoomla\!2.5.3cpe:2.3:a:joomla:joomla\!:2.5.3:*:*:*:*:*:*:*
joomlajoomla\!2.5.4cpe:2.3:a:joomla:joomla\!:2.5.4:*:*:*:*:*:*:*
joomlajoomla\!2.5.5cpe:2.3:a:joomla:joomla\!:2.5.5:*:*:*:*:*:*:*
joomlajoomla\!2.5.6cpe:2.3:a:joomla:joomla\!:2.5.6:*:*:*:*:*:*:*
joomlajoomla\!2.5.7cpe:2.3:a:joomla:joomla\!:2.5.7:*:*:*:*:*:*:*
joomlajoomla\!2.5.8cpe:2.3:a:joomla:joomla\!:2.5.8:*:*:*:*:*:*:*
joomlajoomla\!3.0.0cpe:2.3:a:joomla:joomla\!:3.0.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
joomla	joomla\!	2.5.0	cpe:2.3:a:joomla:joomla\!:2.5.0:::::::*
joomla	joomla\!	2.5.1	cpe:2.3:a:joomla:joomla\!:2.5.1:::::::*
joomla	joomla\!	2.5.2	cpe:2.3:a:joomla:joomla\!:2.5.2:::::::*
joomla	joomla\!	2.5.3	cpe:2.3:a:joomla:joomla\!:2.5.3:::::::*
joomla	joomla\!	2.5.4	cpe:2.3:a:joomla:joomla\!:2.5.4:::::::*
joomla	joomla\!	2.5.5	cpe:2.3:a:joomla:joomla\!:2.5.5:::::::*
joomla	joomla\!	2.5.6	cpe:2.3:a:joomla:joomla\!:2.5.6:::::::*
joomla	joomla\!	2.5.7	cpe:2.3:a:joomla:joomla\!:2.5.7:::::::*
joomla	joomla\!	2.5.8	cpe:2.3:a:joomla:joomla\!:2.5.8:::::::*
joomla	joomla\!	3.0.0	cpe:2.3:a:joomla:joomla\!:3.0.0:::::::*