Joomla! Framework Remote Code Injection Vulnerability · CVE-2015-8566 · GitHub Advisory Database · GitHub

Joomla! Framework Remote Code Injection Vulnerability

High severity GitHub Reviewed Published May 17, 2022 to the GitHub Advisory Database • Updated Apr 25, 2024

Package

joomla/session (Composer)

Affected versions

< 1.3.1

Patched versions

1.3.1

Description

The Session package 1.x before 1.3.1 for Joomla! Framework allows remote attackers to execute arbitrary code via unspecified session values.

References

Published by the National Vulnerability Database

Dec 16, 2015

Published to the GitHub Advisory Database May 17, 2022

Reviewed Apr 25, 2024

Last updated Apr 25, 2024