Description

Joomla! 2.5.x before 2.5.4 does not properly check permissions, which allows attackers to obtain sensitive "administrative back end" information via unknown attack vectors. NOTE: this might be a duplicate of CVE-2012-1599.

Remediation

References

CVE-2012-1611

Related Vulnerabilities

WordPress Plugin Email Subscribers by Icegram Express-Email Marketing, Newsletters, Automation for WordPress & WooCommerce Cross-Site Scripting (4.0.13)

Serendipity Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2017-5609)

WordPress Plugin Yasr-Yet Another Stars Rating PHP Object Injection (1.8.6)

WordPress Plugin WP RSS Multi Importer Multiple Cross-Site Request Forgery Vulnerabilities (3.11)

WordPress Plugin PowerPack Lite for Beaver Builder Cross-Site Scripting (1.3.0)

Severity

Medium

Classification

CVE-2012-1611 CWE-264

Tags

Missing Update Known Vulnerabilities