Joomla! 'index.php' Remote Privilege Escalation Vulnerability

Bugtraq ID:	52534
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Mar 16 2012 12:00AM
Updated:	Mar 16 2012 12:00AM
Credit:	Jeff Channel
Vulnerable:	Joomla Joomla! 2.5.2 Joomla Joomla! 2.5.1 Joomla Joomla! 2.5
Not Vulnerable:	Joomla Joomla! 2.5.3

Joomla! 'index.php' Remote Privilege Escalation Vulnerability

Joomla! is prone to a remote privilege-escalation vulnerability.

An attacker can exploit this issue to escalate privileges and perform unauthorized actions.

Joomla! versions 2.5.0 through 2.5.2. are vulnerable.

Joomla! 'index.php' Remote Privilege Escalation Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Joomla! 'index.php' Remote Privilege Escalation Vulnerability

Solution:
Vendor updates are available. Please contact the vendor for more information.

Joomla! 'index.php' Remote Privilege Escalation Vulnerability

References:

• JOOMLA 2.5.3 RELEASED (Joomla!)
  
• Joomla! 1.6/1.7/2.5 Privilege Escalation Vulnerability (Jeff Channel)
  
• Joomla! Homepage (Joomla )