VDB
CVE-2015-8562
CVE-2015-8562
PUBLISHED
KEV
CVSS 7.5 HIGH
Joomla! 1.5.x, 2.x, and 3.x before 3.4.6 allow remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via the HTTP User-Agent header, as exploited in the wild in December 2015.
EPSS 98.28% · 99.9th percentile
Risk Scores
CVSS 2.0
7.5
EPSS Score
98.28%
99.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| joomla | joomla\! | 2.5.10, 1.5.16, 1.7.1 |
| n/a | n/a | n/a |
Timeline
- Oct 9, 2013 VulnCheck KEV Exploitation
- Dec 15, 2015 PoC Published
- Dec 16, 2015 VulnCheck KEV Exploitation
- Dec 16, 2015 CVE Published
- Dec 18, 2015 PoC Published
- Dec 19, 2015 PoC Published
- May 12, 2016 PoC Published
- Oct 28, 2016 VulnCheck KEV Exploitation
- May 29, 2018 PoC Published
- Aug 28, 2019 VulnCheck KEV Exploitation
- Feb 7, 2020 VulnCheck XDB Entry
- Jul 25, 2020 VulnCheck XDB Entry
References
- Nuclei Template exploit
- http://www.securityfocus.com/archive/1/537219/100/0/threaded technical
- https://blog.sucuri.net/2015/12/remote-command-execution-vulnerability-in-joomla.html exploit
- http://packetstormsecurity.com/files/134949/Joomla-HTTP-Header-Unauthenticated-Remote-Code-Execution.html exploit
- https://developer.joomla.org/security-centre/630-20151214-core-remote-code-execution-vulnerability.html advisory
- https://www.exploit-db.com/exploits/39033/ exploit
- https://nvd.nist.gov/vuln/detail/CVE-2015-8562 advisory
- https://www.exploit-db.com/exploits/38977 url
- https://www.exploit-db.com/exploits/39033 url
- http://packetstormsecurity.com/files/135100/Joomla-3.4.5-Object-Injection.html url
- 38977 exploit
- 79195 vdb
- http://www.rapid7.com/db/modules/exploit/multi/http/joomla_http_header_rce url