Description
Joomla! 1.5.x, 2.x, and 3.x before 3.4.6 allow remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via the HTTP User-Agent header, as exploited in the wild in December 2015.
Remediation
References
Related Vulnerabilities
WordPress Plugin DOP Slider Arbitrary File Upload (1.0)
Joomla Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2022-27912)
MediaWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2022-29903)
Apache Tomcat Improper Input Validation Vulnerability (CVE-2016-1240)
WordPress Plugin Social Gallery and Widget Security Bypass (2.2.5)