joomla-framework/session · Security
Joomla! Framework Remote Code Injection Vulnerability
- GHSA ID
- GHSA-wwfh-28hx-w2r2
- CVE ID
- CVE-2015-8566
- Severity
- high
- Published
- Updated
Description
The Session package 1.x before 1.3.1 for Joomla! Framework allows remote attackers to execute arbitrary code via unspecified session values.
CWEs
- CWE-74 · Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
References
- https://nvd.nist.gov/vuln/detail/CVE-2015-8566 ↗
- https://developer.joomla.org/security-centre/637-20151205-session-remote-code-execution-vulnerability.html ↗
- https://github.com/FriendsOfPHP/security-advisories/blob/master/joomla/session/CVE-2015-8566.yaml ↗
- https://web.archive.org/web/20160603093633/http://www.securityfocus.com/bid/79197 ↗
- https://github.com/advisories/GHSA-wwfh-28hx-w2r2 ↗