Multiple vulnerabilities in Joomla!

Posted: November 26, 2012 in Vulnerabilities
Tags: , ,

Vulnerability

Multiple vulnerabilities in Joomla!

Vulnerability: Multiple vulnerabilities in Joomla!

Danger: Low
Patch: Yes
Number of vulnerabilities: 1

CVE ID: CVE-2012-5827
Vector of operation: Remote
Impact: Cross Site Scripting
Security Bypass

Affected products: Joomla! 2.x

Affected versions: Joomla! 2.5.7 possibly earlier.

Description:

The vulnerability allows malicious people to conduct XSS attacks.

The vulnerability is caused due to the lack of authentication of HTTP requests when you perform some action. A remote user can perform CSRF attack.

Manufacturer URL: http://www.joomla.org/

Solution: Install the latest version 2.5.8 from the manufacturer.

links:

http://developer.joomla.org/security/news/544-20121102-core-clickjacking.html

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s