Description
plugins/system/remember/remember.php in Joomla! 2.5.x before 2.5.10 and 3.0.x before 3.0.4 does not properly handle an object obtained by unserializing a cookie, which allows remote authenticated users to conduct PHP object injection attacks and cause a denial of service via unspecified vectors.
Remediation
References
Related Vulnerabilities
MySQL CVE-2015-4913 Vulnerability (CVE-2015-4913)
WordPress Plugin Posts in Page Local File Inclusion (1.2.4)
axios Permissive List of Allowed Inputs Vulnerability (CVE-2026-42042)
WordPress Plugin Simplified Content Cross-Site Scripting (1.0.0)
WordPress Plugin Rating-Widget:Star Review System Cross-Site Scripting (2.8.8)