PT-2012-5025 · Joomla · Joomla!

Publicado 2012-07-03 · Atualizado 2012-07-17 · CVE-2012-3829

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Joomla! version 2.5.3

Description The issue allows remote attackers to obtain the installation path via the Host HTTP Header.

Recommendations For version 2.5.3, update to a newer version to mitigate the risk.

Exploit

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2012-3829

Produtos afetados

Joomla!

Referências · 3

• 🔥 http://packetstormsecurity.org/files/112249/Joomla-2.5.3-Host-Header-Cross-Site-Scripting.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2012-3829 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3829 · Nota