CVE-2014-7228

CVE-2014-7228 affects multiple Joomla! related products (notably Akeeba Kickstart/Restore components and related tools) where, during backup or archive update cleansing, parameters are not removed from $_GET/$_POST and are later accessed via getQueryParam. This allows a remote attacker to bypass ...

Joomla! Component Akeeba Kickstart - Unserialize Remote Code Execution (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'rex/zip' require 'json' class Metasploit3 "Joomla Akeeba Kickstart Unserialize Remote Code Execution", 'Description' = %q This module exploits ...

Joomla Akeeba Kickstart Unserialize Remote Code Execution Exploit

This Metasploit module exploits a vulnerability found in Joomla! through 2.5.25, 3.2.5 and earlier 3.x versions and 3.3.0 through 3.3.4 versions. The vulnerability affects the Akeeba component, which is responsible for Joomla! updates. Nevertheless it is worth to note that this vulnerability is...

Joomla Akeeba Kickstart Unserialize Remote Code Execution

This module exploits a vulnerability found in Joomla! through 2.5.25, 3.2.5 and earlier 3.x versions and 3.3.0 through 3.3.4 versions. The vulnerability affects the Akeeba component, which is responsible for Joomla! updates. Nevertheless it is worth to note that this vulnerability is only...

Joomla! 2.5.x < 2.5.26 / 3.x < 3.2.6 / 3.3.x < 3.3.5 Multiple Vulnerabilities

According to its self-reported version number, the Joomla! installation running on the remote web server is 2.5.x prior to 2.5.26, 3.x prior to 3.2.6, or 3.3.x prior to 3.3.5. It is, therefore, affected by multiple vulnerabilities : - A security bypass vulnerability exists in the restore.php scri...

Fedora Update for php-horde-Horde-Ldap FEDORA-2014-7228

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...