Mandriva Linux Security Advisory : joomla (MDVSA-2008:060)

Several severe security issues were discovered in the Joomla! PHP-based content management system. These issues have been fixed in version 1.0.15 which is provided with this update. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

CVE-2007-6645

Joomla! CVE-2007-6645 affects Joomla before 1.5 RC4, allowing remote authenticated users to escalate privileges via unspecified vectors. Public docs confirm the issue and point to a fixed package in Joomla 1.0.15 per Mandriva MDVSA-2008:060; no exploit details are provided in the supplied sources.