GitHub Advisoryadvisory · Packagist
GHSA-wwfh-28hx-w2r2 Joomla! Framework Remote Code Injection Vulnerability
HIGH
Official page ↗
- Aliases
- CVE-2015-8566
- Ecosystem
- Packagist
- Packages
- joomla/session
- Severity
- High
- Weaknesses
- CWE-74
- Reviewed
- 2024-04-25
Affected packages
• Packagist joomla/session: < 1.3.1 → fixed in 1.3.1
Description
The Session package 1.x before 1.3.1 for Joomla! Framework allows remote attackers to execute arbitrary code via unspecified session values.
Related
Alias · CVE (1)
- CVE-2015-8566 The Session package 1.x before 1.3.1 for Joomla! vulnerability
Weakness · CWE (1)
- CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component weakness
References
- https://nvd.nist.gov/vuln/detail/CVE-2015-8566 advisory
- https://developer.joomla.org/security-centre/637-20151205-session-remote-code-execution-vulnerability.html web
- https://github.com/FriendsOfPHP/security-advisories/blob/master/joomla/session/CVE-2015-8566.yaml web
- https://github.com/joomla-framework/session package
- https://web.archive.org/web/20160603093633/http://www.securityfocus.com/bid/79197 web