Description

Joomla! CMS 2.5.x before 2.5.19 and 3.x before 3.2.3 allows remote attackers to authenticate and bypass intended restrictions via vectors involving GMail authentication.

Remediation

References

CVE-2014-7984

Related Vulnerabilities

WordPress Plugin WP Users Exporter CSV Injection (1.4.2)

Internet Information Services Other Vulnerability (CVE-2001-0004)

e107 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2011-4946)

WordPress Plugin Hustle-Pop-Ups, Slide-ins and Email Opt-ins CSV Injection (6.0.7)

MySQL CVE-2018-3060 Vulnerability (CVE-2018-3060)

Severity

High

Classification

CVE-2014-7984 CWE-264

Tags

Missing Update Known Vulnerabilities