NVD

Id
37651  
Name
CVE-2013-1453  
Description
plugins/system/highlight/highlight.php in Joomla! 3.0.x through 3.0.2 and 2.5.x through 2.5.8 allows attackers to unserialize arbitrary PHP objects to obtain sensitive information, delete arbitrary directories, conduct SQL injection attacks, and possibly have other impacts via the highlight parameter. Note: it was originally reported that this issue only allowed attackers to obtain sensitive information, but later analysis demonstrated that other attacks exist.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2013-02-12  
Modified Date
2013-03-06  
Seq
2013-1453  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
191516 37651 CVE-2013-1453 http://developer.joomla.org/security/news/548-20130201-core-information-disclosure.html  View
191517 37651 CVE-2013-1453 http://karmainsecurity.com/analysis-of-the-joomla-php-object-injection-vulnerability  View
191518 37651 CVE-2013-1453 http://karmainsecurity.com/KIS-2013-03  View
191519 37651 CVE-2013-1453 joomla-search-information-disclosure(81925)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
19980 JVNDB-2013-001555 Joomla! における重要な情報を取得される脆弱性 Joomla! の plugins/system/highlight/highlight.php には、任意の PHP オブジェクトをアンシリアライズされることで、重要な情報を取得される、任意のディレクトリを削除される、SQL インジェクション攻撃を実行されるなど、不特定の影響を受ける脆弱性が存在します。 CVE-2013-1453 61395 CVE-2013-1453 37651 7.5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001555.html 2013-02-04 2013-04-22 View