CVE-2013-3242

Published: May 3, 2013Modified: Apr 29, 2026

5.5

Vector

AV:N/AC:L/Au:S/C:N/I:P/A:P

Exploitability: 8.0 / Impact: 4.9

Source: NVD

Description

plugins/system/remember/remember.php in Joomla! 2.5.x before 2.5.10 and 3.0.x before 3.0.4 does not properly handle an object obtained by unserializing a cookie, which allows remote authenticated users to conduct PHP object injection attacks and cause a denial of service via unspecified vectors.

Affected (14)

Products: Joomla: Joomla!

Joomla

1 product

Joomla!

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Joomla Joomla!	Version 3.0.0
Joomla Joomla!	Version 3.0.1
Joomla Joomla!	Version 3.0.2
Joomla Joomla!	Version 3.0.3

Configuration B

10 vulnerable

Vulnerable Software	Affected Versions
Joomla Joomla!	Version 2.5.0
Joomla Joomla!	Version 2.5.1
Joomla Joomla!	Version 2.5.2
Joomla Joomla!	Version 2.5.3
Joomla Joomla!	Version 2.5.4
Joomla Joomla!	Version 2.5.5
Joomla Joomla!	Version 2.5.6
Joomla Joomla!	Version 2.5.7
Joomla Joomla!	Version 2.5.8
Joomla Joomla!	Version 2.5.9