CVE-2007-6644

UNKNOWN

Joomla! before 1

Published Jan 4, 2008

Modified 1 years ago

Details

Joomla! before 1.5 RC4 allows remote authenticated administrators to promote arbitrary users to the administrator group, in violation of the intended security model.

References

WEB

http://osvdb.org/43277

ADVISORY

http://secunia.com/advisories/29257

WEB

http://securitytracker.com/id?1019145

WEB

http://www.joomla.org/content/view/4335/116/

ADVISORY

http://www.mandriva.com/security/advisories?name=MDVSA-2008:060

WEB

http://www.securityfocus.com/bid/28111

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2007-6644

CVSS Analysis

CVSS v2.0

6.5

Exploitability

Access Vector

NetworkAV:N

Access Complexity

LowAC:L

Authentication

SingleAu:S

Impact

Confidentiality

PartialC:P

Integrity

PartialI:P

Availability

PartialA:P

6.5/AV:N/AC:L/Au:S/C:P/I:P/A:P

Ecosystems

Timeline

PublishedJan 4, 2008

ModifiedAug 7, 2024