Unscored CVE-2007-6642 EUVD-2007-6607GHSA-cpg7-299x-5p6h

Multiple cross-site request forgery (CSRF) vulnerabilities in Joomla! before 1.5 RC4 allow remote attackers to (1) add a Super Admin, (2) u…

Published Jan 4, 2008 · Updated Aug 7, 2024 · Assigned by mitre

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in Joomla! before 1.5 RC4 allow remote attackers to (1) add a Super Admin, (2) upload an extension containing arbitrary PHP code, and (3) modify the configuration as administrators via unspecified vectors.

References

28111 vdb-entry
29257 third-party-advisory
1019145 vdb-entry
http://www.joomla.org/content/view/4335/116/
20071227 [HSC Security Group] Multiple CSRF in Joomla all versions - Complete compromise mailing-list
MDVSA-2008:060 vendor-advisory
3505 third-party-advisory
41263 vdb-entry