Description
Joomla! Core is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions by escalating their privileges due to a programming error. Joomla! Core versions 1.7.x ranging from 1.7.0 and up to and including 1.7.5 are vulnerable.
Remediation
Update to Joomla! Core version 2.5.3 or latest
References
http://jeffchannell.com/Joomla/joomla-161725-privilege-escalation-vulnerability.html
https://www.exploit-db.com/exploits/41156/
https://developer.joomla.org/security-centre/395-20120303-core-privilege-escalation.html
Related Vulnerabilities
Telerik Web UI Insufficiently Protected Credentials Vulnerability (CVE-2017-9248)
WordPress Plugin Structured Content (JSON-LD) #wpsc Cross-Site Scripting (1.5)
WordPress Plugin Login Logout Menu Cross-Site Scripting (1.3.3)
WordPress Plugin Sliding Recent Posts Cross-Site Request Forgery (1.0)
IBM RTC Improper Restriction of XML External Entity Reference Vulnerability (CVE-2016-9707)