SecuritySpace - CVE-2013-1453

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2013-1453

Description: plugins/system/highlight/highlight.php in Joomla! 3.0.x through 3.0.2 and 2.5.x through 2.5.8 allows attackers to unserialize arbitrary PHP objects to obtain sensitive information, delete arbitrary directories, conduct SQL injection attacks, and possibly have other impacts via the highlight parameter. Note: it was originally reported that this issue only allowed attackers to obtain sensitive information, but later analysis demonstrated that other attacks exist.

Test IDs: 1.3.6.1.4.1.25623.1.0.103673

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2013-1453
http://karmainsecurity.com/KIS-2013-03
http://karmainsecurity.com/analysis-of-the-joomla-php-object-injection-vulnerability
XForce ISS Database: joomla-search-information-disclosure(81925)
https://exchange.xforce.ibmcloud.com/vulnerabilities/81925

CVE ID:	CVE-2013-1453
Description:	plugins/system/highlight/highlight.php in Joomla! 3.0.x through 3.0.2 and 2.5.x through 2.5.8 allows attackers to unserialize arbitrary PHP objects to obtain sensitive information, delete arbitrary directories, conduct SQL injection attacks, and possibly have other impacts via the highlight parameter. Note: it was originally reported that this issue only allowed attackers to obtain sensitive information, but later analysis demonstrated that other attacks exist.
Test IDs:	1.3.6.1.4.1.25623.1.0.103673
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2013-1453 http://karmainsecurity.com/KIS-2013-03 http://karmainsecurity.com/analysis-of-the-joomla-php-object-injection-vulnerability XForce ISS Database: joomla-search-information-disclosure(81925) https://exchange.xforce.ibmcloud.com/vulnerabilities/81925