Mandriva Linux Security Advisory : joomla (MDVSA-2008:060)

Several severe security issues were discovered in the Joomla! PHP-based content management system. These issues have been fixed in version 1.0.15 which is provided with this update. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

CVE-2007-6642

CVE-2007-6642 concerns Joomla! before 1.5 RC4, with multiple CSRF vulnerabilities that allow remote attackers to perform admin-level actions via unspecified vectors, including adding a Super Admin, uploading extensions containing PHP code, and modifying configuration. The linked documents confirm...