Description

Directory traversal vulnerability in Joomla! 3.4.x before 3.4.6 allows remote attackers to have unspecified impact via directory traversal sequences in the XML install file in an extension package archive.

Remediation

References

CVE-2015-8564

Related Vulnerabilities

MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-42046)

Seo Panel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-29008)

Serendipity Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-8101)

MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-46150)

WordPress Plugin TablePress XML External Entity Injection (1.8)

Severity

High

Classification

CVE-2015-8564 CWE-20

Tags

Missing Update Known Vulnerabilities