QwikSec

Security Database

CVE

CWE

Training

CVE-2010-1435

Published: Jun 21, 2021

Modified: Aug 7, 2024

PUBLISHED

Description

Joomla! Core is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently retrieve password reset tokens from the database through an already existing SQL injection vector. Joomla! Core versions 1.5.x ranging from 1.5.0 and up to and including 1.5.15 are vulnerable.

Vendor	Product	Versions
n/a	Joomla	affected `Joomla core from 1.5.0 up to and including 1.5.15`

Weaknesses (CWE)

References

https://developer.joomla.org/security-centre/308-20100423-core-password-reset-tokens.html

x_refsource_MISC

https://www.acunetix.com/vulnerabilities/web/joomla-core-1-5-x-security-bypass-1-5-0-1-5-15/

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.