CVE-2013-3056

Published: May 3, 2013Modified: Apr 29, 2026

4.0

Vector

AV:N/AC:L/Au:S/C:N/I:N/A:P

Exploitability: 8.0 / Impact: 2.9

Source: NVD

Description

Joomla! 2.5.x before 2.5.10 and 3.0.x before 3.0.4 allows remote authenticated users to bypass intended privilege requirements and delete the private messages of arbitrary users via unspecified vectors.

Affected (14)

Products: Joomla: Joomla!

Joomla

1 product

Joomla!

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Joomla Joomla!	Version 2.5.0
Joomla Joomla!	Version 2.5.1
Joomla Joomla!	Version 2.5.2
Joomla Joomla!	Version 2.5.3
Joomla Joomla!	Version 2.5.4
Joomla Joomla!	Version 2.5.5
Joomla Joomla!	Version 2.5.6
Joomla Joomla!	Version 2.5.7
Joomla Joomla!	Version 2.5.8
Joomla Joomla!	Version 2.5.9

Configuration B

4 vulnerable

Vulnerable Software	Affected Versions
Joomla Joomla!	Version 3.0.0
Joomla Joomla!	Version 3.0.1
Joomla Joomla!	Version 3.0.2
Joomla Joomla!	Version 3.0.3

Related CWEs

CWE-264

References (2)

http://developer.joomla.org/security/84-20130401-core-privilege-escalation.html

Source: cve@mitre.org

Vendor Advisory

http://developer.joomla.org/security/84-20130401-core-privilege-escalation.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.