PT-2018-14228

Name of the Vulnerable Software and Affected Versions Joomla! versions prior to 3.8.13 Description An issue in Joomla! allows the execution of arbitrary code through com joomlaupdate. By default, the ACL configuration enables Administrator-level users to access com joomlaupdate, which can trigger...

Joomla Akeeba Kickstart Unserialize Remote Code Execution

This module exploits a vulnerability found in Joomla! through 2.5.25, 3.2.5 and earlier 3.x versions and 3.3.0 through 3.3.4 versions. The vulnerability affects the Akeeba component, which is responsible for Joomla! updates. Nevertheless it is worth to note that this vulnerability is only...