Joomla! 1.5 < 3.4.5 RCE

Description

OS Command Execution, also known as Command Injection, is a severe vulnerability that allows attackers to execute arbitrary commands on the host operating system. Attackers exploit this vulnerability by injecting malicious commands through forms, cookies, or HTTP headers. These commands run with the privileges of the vulnerable application, leading to unauthorized access, data theft, and system compromise.

Recommendation

Upgrade Joomla! to the latest stable version.

References

• Joomla!
• OWASP: Command Injection
• CVE-2015-8562
• CWE-20
• CWE-78
• CAPEC-88
• CAPEC-310
• OWASP 2021-A3
• OWASP 2021-A6

Related Issues

• WordPress Plugin Wpfilemanager 6.8 RCE - CVE-2020-25213
• OS Command Execution - Vulnerability
• Blind OS Command Execution - Vulnerability
• PHP CGI Argument Injection RCE - CVE-2012-1823, CVE-2024-4577

Tags:

Joomla

RCE

Command Injection

Input Validation

Injection