CVE-2015-8566

The Session package 1.x before 1.3.1 for Joomla! Framework allows remote attackers to execute arbitrary code via unspecified session values.

CVSS v2.0 NVD

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

8.46% chance of exploitation in the next 30 days, 95th percentile

Published

2015-12-16

Updated

2024-08-06

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/39033

Security advisories

• https://developer.joomla.org/security-centre/637-20151205-session-remote-code-execution-v…
• advisories/GHSA-wwfh-28hx-w2r2
• http://www.securityfocus.com/bid/79197

References

• CVE Record
• NVD entry