PT-2013-4248 · Open Source Matters · Joomla!

Egidio Romano + 1 · Published 2013-05-03 · Updated 2024-06-15 · CVE-2013-3242

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions Joomla! versions 2.5.x through 2.5.9 Joomla! versions 3.0.x through 3.0.3

Description The issue allows remote authenticated users to conduct PHP object injection attacks, potentially causing a denial of service. This is due to improper handling of an object obtained by unserializing a cookie in the plugins/system/remember/remember.php file.

Recommendations For Joomla! versions 2.5.x through 2.5.9, update to version 2.5.10 or later. For Joomla! versions 3.0.x through 3.0.3, update to version 3.0.4 or later.

Exploit

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2013-3242

OPENSUSE-SU-2024:10054-1

Affected Products

Joomla!

References · 132

• 🔥 http://exploit-db.com/exploits/25087 · Exploit
• 🔥 http://karmainsecurity.com/KIS-2013-04 · Exploit
• 🔥 https://exploit-db.com/exploits/25087 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2013-3242 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:10054-1 · Vendor Advisory
• https://suse.com/security/cve/CVE-2016-9859 · Note
• https://suse.com/security/cve/CVE-2016-9865 · Note
• https://suse.com/security/cve/CVE-2015-3903 · Note
• https://suse.com/security/cve/CVE-2013-3241 · Note
• https://suse.com/security/cve/CVE-2016-2038 · Note
• https://suse.com/security/cve/CVE-2016-6630 · Note
• https://suse.com/security/cve/CVE-2011-4782 · Note
• https://suse.com/security/cve/CVE-2016-2042 · Note
• https://suse.com/security/cve/CVE-2016-9858 · Note
• https://suse.com/security/cve/CVE-2016-9863 · Note