Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2012-1563 — Improper Privilege Management in Joomla !

CWE-269 — Improper Privilege Management4 documents4 sources
Severity
7.5HIGHNVD
EPSS
3.2%
top 12.87%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
2
Joomla !Joomla!
Timeline
PublishedJan 15
Latest updateApr 23

Description

Joomla! before 2.5.3 allows Admin Account Creation.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages2 packages

▶NVDjoomla/joomla_!< 2.5.3
▶CVEListV5joomla!/joomla!4 versions+3

🔴Vulnerability Details

2
GHSA
GHSA-w8hc-6857-68v3: Joomla! before 2↗2022-04-23
▶
CVEList
CVE-2012-1563: Joomla! before 2↗2020-01-15
▶

💥Exploits & PoCs

1
Exploit-DB
Joomla! < 2.5.2 - Admin Creation↗2017-01-20
▶