Description
Joomla! before 1.5 RC4 allows remote authenticated administrators to promote arbitrary users to the administrator group, in violation of the intended security model.
References
- 28111 vdb-entry
- 29257 third-party-advisory
- http://www.joomla.org/content/view/4335/116/
- 1019145 vdb-entry
- MDVSA-2008:060 vendor-advisory
- 43277 vdb-entry