Description

Directory traversal vulnerability in Joomla! 3.4.x before 3.4.6 allows remote attackers to have unspecified impact via directory traversal sequences in the XML install file in an extension package archive.

Remediation

References

CVE-2015-8564

Related Vulnerabilities

Piwigo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-5692)

Python CVE-2019-17514 Vulnerability (CVE-2019-17514)

WordPress Plugin PayPlus Payment Gateway SQL Injection (6.6.8)

WordPress Plugin OAuth Single Sign On-SSO (OAuth Client) Cross-Site Scripting (6.20.2)

WordPress Plugin User Registration-Custom Registration Form, Login Form And User Profile Security Bypass (2.3.2.1)

Severity

High

Classification

CVE-2015-8564 CWE-20

Tags

Missing Update Known Vulnerabilities