Description

The com_contenthistory component in Joomla! 3.2 before 3.4.5 does not properly check ACLs, which allows remote attackers to obtain sensitive information via unspecified vectors.

Remediation

References

CVE-2015-7859

Related Vulnerabilities

WordPress Plugin Klaviyo Cross-Site Scripting (3.0.7)

Magento Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2019-8130)

WordPress Plugin Share Woocommerce to Email Cross-Site Scripting (1.0.1)

WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership Multiple Vulnerabilities (1.3.88)

Oracle Database Server Permissions, Privileges, and Access Controls Vulnerability (CVE-2008-6065)

Severity

Medium

Classification

CVE-2015-7859 CWE-200

Tags

Missing Update Known Vulnerabilities