ID de Prueba:	1.3.6.1.4.1.25623.1.0.105487
Categoría:	Web application abuses
Título:	Joomla! 1.5.0 < 3.4.6 RCE Vulnerability - Version Check
Resumen:	Joomla! is prone to a remote code execution (RCE); vulnerability.
Descripción:	Summary: Joomla! is prone to a remote code execution (RCE) vulnerability. Vulnerability Insight: Browser information is not filtered properly while saving the session values into the database which leads to a Remote Code Execution vulnerability. Vulnerability Impact: Successfully exploiting this issue allows attackers to execute arbitrary code in the context of the affected application. Affected Software/OS: Joomla! versions 1.5.0 through 3.4.5. Solution: Update to version 3.4.6 or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2015-8562 BugTraq ID: 79195 http://www.securityfocus.com/bid/79195 Bugtraq: 20151231 Joomla 1.5.x to 3.4.5 Object Injection Exploit (golang) (Google Search) http://www.securityfocus.com/archive/1/537219/100/0/threaded https://www.exploit-db.com/exploits/38977/ https://www.exploit-db.com/exploits/39033/ http://packetstormsecurity.com/files/134949/Joomla-HTTP-Header-Unauthenticated-Remote-Code-Execution.html http://packetstormsecurity.com/files/135100/Joomla-3.4.5-Object-Injection.html http://www.rapid7.com/db/modules/exploit/multi/http/joomla_http_header_rce https://blog.sucuri.net/2015/12/remote-command-execution-vulnerability-in-joomla.html
Copyright	Copyright (C) 2015 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.