Joomla! 1.5.x, 2.x, and 3.x before 3.4.6 allow remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via the HTTP User-Agent header, as exploited in the wild in December 2015.
References
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2015-12-16 21:59
Updated : 2024-02-04 18:53
NVD link : CVE-2015-8562
Mitre link : CVE-2015-8562
CVE.ORG link : CVE-2015-8562
JSON object : View
Products Affected
joomla
- joomla\!
CWE
CWE-20
Improper Input Validation