CVE-2015-8566

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• Joomla! 1.5 < 3.4.6 - Object Injection 'x-forwarded-for' Header Remote Code Execution2015-12-18 · webapps · php

Impact

The Session package 1.x before 1.3.1 for Joomla! Framework allows remote attackers to execute arbitrary code via unspecified session values.

Affected products

References

• NVD record
• CVE.org record
• http://www.securityfocus.com/bid/79197
• https://developer.joomla.org/security-centre/637-20151205-session-remote-code-execution-vulnerability.html
• http://www.securityfocus.com/bid/79197
• https://developer.joomla.org/security-centre/637-20151205-session-remote-code-execution-vulnerability.html