Joomla! 'highlight' Parameter PHP Object Injection Vulnerability

  1. Network Vulnerabilities
  2. Web application abuses
  3. Joomla! 'highlight' Parameter PHP Object Injection Vulnerability
Summary
Joomla! is prone to a remote PHP object-injection vulnerability because it fails to properly validate user-supplied input. Attackers can exploit this issue to inject arbitrary object in to the application. This may aid in further attacks. The following versions are vulnerable: Joomla! 2.0.0 through versions prior to 2.5.9 Joomla! 3.0.0 through versions prior to 3.0.3
Solution
Vendor updates are available. Please see the references for more information.
References
Updated on 2015-03-25
Severity
High Severity
Classification
Related Vulnerabilities