Description

Joomla! 2.5.x before 2.5.10 and 3.0.x before 3.0.4 allows remote authenticated users to bypass intended privilege requirements and delete the private messages of arbitrary users via unspecified vectors.

Remediation

References

CVE-2013-3056

Related Vulnerabilities

WordPress Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2007-6318)

WordPress Plugin Elementor Website Builder Cross-Site Scripting (3.5.5)

Apache Traffic Server Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2019-9514)

WordPress Plugin Responsive Filterable Portfolio Unspecified Vulnerability (1.0.8)

WordPress Plugin Elementor Pro Arbitrary File Upload (2.9.3)

Severity

Medium

Classification

CVE-2013-3056 CWE-264

Tags

Missing Update Known Vulnerabilities