CVE-2013-3242

plugins/system/remember/remember.php in Joomla! 2.5.x before 2.5.10 and 3.0.x before 3.0.4 does not properly handle an object obtained by unserializing a cookie, which allows remote authenticated users to conduct PHP object injection attacks and cause a denial of service via unspecified vectors.

CVSS v2.0

5.5 MEDIUMAV:N/AC:L/Au:S/C:N/I:P/A:P

EPSS

4.85% chance of exploitation in the next 30 days, 91th percentile

Published

2013-05-03

Updated

2024-08-06

Proof-of-concept exploits (1)

• http://www.exploit-db.com/exploits/25087

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/25087

References

• CVE Record
• NVD entry

Related

• CVE-2013-3241
• CVE-2013-3245
• CVE-2013-3240
• CVE-2013-3248
• CVE-2013-3239
• CVE-2013-3294