CVEvulnerability
CVE-2013-3056
4.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-05-03
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:N/I:N/A:P
- Weaknesses
- CWE-264
Description
Joomla! 2.5.x before 2.5.10 and 3.0.x before 3.0.4 allows remote authenticated users to bypass intended privilege requirements and delete the private messages of arbitrary users via unspecified vectors.
Affected configurations
• joomla joomla\! 2.5.0
• joomla joomla\! 2.5.1
• joomla joomla\! 2.5.2
• joomla joomla\! 2.5.3
• joomla joomla\! 2.5.4
• joomla joomla\! 2.5.5
• joomla joomla\! 2.5.6
• joomla joomla\! 2.5.7
• joomla joomla\! 2.5.8
• joomla joomla\! 2.5.9
• joomla joomla\! 3.0.0
• joomla joomla\! 3.0.1
• joomla joomla\! 3.0.2
• joomla joomla\! 3.0.3