Zero-day Vulnerability Database

Change view:

Zero-day vulnerabilities discovered: 1

Remote PHP code execution in Joomla!
CVE-2015-8562

Remote PHP code execution

The vulnerability allows a remote attacker to execute arbitrary PHP code on the target system.

The vulnerability exists due to insufficient filtration of HTTP User-Agent header and filter-search HTTP POST parameter before storing them into database. A remote unauthenticated attacker can permanently inject and execute arbitrary PHP code on the target system with privileges of the web server.

Successful exploitation of this vulnerability will allow a remote attacker to gain complete control over the vulnerable web application and execute arbitrary PHP code on the target system.

Note: this is a zero-day vulnerability and it is being exploited in the wild.

i

The vulnerability was used to compromise vulnerable websites for 16000 (sometimes - 20000) times per day.

Software: Joomla!

The vulnerability was used to compromise vulnerable websites for 16000 (sometimes - 20000) times per day.

Vulnerability Scanning SaaS

Vulnerability scanning SaaS service is online 3-rd generation vulnerability scanner with scheduled assessments and vulnerability subscription. You can use service to check security of your network perimeter.