Description

Joomla! 1.5.x, 2.x, and 3.x before 3.4.6 allow remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via the HTTP User-Agent header, as exploited in the wild in December 2015.

Remediation

References

CVE-2015-8562

Related Vulnerabilities

WordPress Plugin YITH WooCommerce Ajax Search Unspecified Vulnerability (1.2.7)

IBMHttpServer Other Vulnerability (CVE-2004-0492)

WordPress Plugin Free Live Chat Support Cross-Site Request Forgery (1.0.11)

WordPress Plugin Ninja Forms Contact Form-The Drag and Drop Form Builder for WordPress Multiple Vulnerabilities (3.3.13)

Joomla Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2020-35614)

Severity

High

Tags

Missing Update Known Vulnerabilities CWE-20 CVE-2015-8562