PT-2021-8331 · Unknown · Joomla! Core

Madis Abel · Published 2021-06-21 · Updated 2021-09-20 · CVE-2010-1435

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Joomla! Core versions 1.5.0 through 1.5.15

Description The issue allows attackers to perform restricted actions and retrieve password reset tokens from the database through an existing SQL injection vector. This is a security bypass vulnerability that may be exploited to gain unauthorized access.

Recommendations For Joomla! Core versions 1.5.0 through 1.5.15, update to a version outside of this range to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2010-1435

Affected Products

Joomla! Core

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2010-1435 · Security Note
• https://developer.joomla.org/security-centre/308-20100423-core-password-reset-tokens.html · Vendor Advisory
• https://t.me/cvenotify/17227 · Telegram Post
• https://acunetix.com/vulnerabilities/web/joomla-core-1-5-x-security-bypass-1-5-0-1-5-15 · Note