Lucene search
HistoryMay 03, 2013 - 11:57 a.m.
CVE-2013-3056
CVSS2
4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:N/I:N/A:P
AI Score
6.3
Confidence
Low
EPSS
0.002
Percentile
53.9%
Joomla! 2.5.x before 2.5.10 and 3.0.x before 3.0.4 allows remote authenticated users to bypass intended privilege requirements and delete the private messages of arbitrary users via unspecified vectors.
Affected configurations
Node
joomlajoomla\!Match2.5.0
ORjoomlajoomla\!Match2.5.1
ORjoomlajoomla\!Match2.5.2
ORjoomlajoomla\!Match2.5.3
ORjoomlajoomla\!Match2.5.4
ORjoomlajoomla\!Match2.5.5
ORjoomlajoomla\!Match2.5.6
ORjoomlajoomla\!Match2.5.7
ORjoomlajoomla\!Match2.5.8
ORjoomlajoomla\!Match2.5.9
Node
joomlajoomla\!Match3.0.0
ORjoomlajoomla\!Match3.0.1
ORjoomlajoomla\!Match3.0.2
ORjoomlajoomla\!Match3.0.3
| Vendor | Product | Version | CPE |
|---|---|---|---|
| joomla | joomla\! | 2.5.0 | cpe:2.3:a:joomla:joomla\!:2.5.0:*:*:*:*:*:*:* |
| joomla | joomla\! | 2.5.1 | cpe:2.3:a:joomla:joomla\!:2.5.1:*:*:*:*:*:*:* |
| joomla | joomla\! | 2.5.2 | cpe:2.3:a:joomla:joomla\!:2.5.2:*:*:*:*:*:*:* |
| joomla | joomla\! | 2.5.3 | cpe:2.3:a:joomla:joomla\!:2.5.3:*:*:*:*:*:*:* |
| joomla | joomla\! | 2.5.4 | cpe:2.3:a:joomla:joomla\!:2.5.4:*:*:*:*:*:*:* |
| joomla | joomla\! | 2.5.5 | cpe:2.3:a:joomla:joomla\!:2.5.5:*:*:*:*:*:*:* |
| joomla | joomla\! | 2.5.6 | cpe:2.3:a:joomla:joomla\!:2.5.6:*:*:*:*:*:*:* |
| joomla | joomla\! | 2.5.7 | cpe:2.3:a:joomla:joomla\!:2.5.7:*:*:*:*:*:*:* |
| joomla | joomla\! | 2.5.8 | cpe:2.3:a:joomla:joomla\!:2.5.8:*:*:*:*:*:*:* |
| joomla | joomla\! | 2.5.9 | cpe:2.3:a:joomla:joomla\!:2.5.9:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2013-3056
2013-05-03 10:00:00
prion
prion
Design/Logic Flaw
2013-05-03 11:57:00
joomla
joomla
[20130401] - Core - Privilege Escalation
2013-03-29 00:00:00
cve
cve
CVE-2013-3056
2013-05-03 11:57:45
nessus
nessus
FreeBSD : Joomla! -- XXS and DDoS vulnerabilities (57df803e-af34-11e2-8d62-6cf0490a8c18)
2013-04-29 00:00:00
Joomla! 2.5.x < 2.5.10 / 3.0.x < 3.0.4 Multiple Vulnerabilities
2013-05-13 00:00:00
freebsd
freebsd
Joomla! -- XXS and DDoS vulnerabilities
2013-04-24 00:00:00
CVSS2
4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:N/I:N/A:P
AI Score
6.3
Confidence
Low
EPSS
0.002
Percentile
53.9%
Related for NVD:CVE-2013-3056