PT-2015-7649

Name of the Vulnerable Software and Affected Versions Joomla! versions 3.2 through 3.4.4 Description The issue concerns the com contenthistory component, which fails to properly check Access Control Lists ACLs, allowing remote attackers to obtain sensitive information. ACLs, or Access Control...

PT-2015-7647

Name of the Vulnerable Software and Affected Versions Joomla! versions prior to 3.4.5 Description A SQL injection issue exists in the getListQuery function in administrator/components/com contenthistory/models/history.php, allowing remote attackers to execute arbitrary SQL commands via the...