we track for your security since 1999

vulnerabilities

The Vigil@nce team watches vulnerabilities impacting your computers, and then offers solutions, a database and tools to correct them.

recent vulnerabilities

tracked products

RSS feed

vulnerability

vulnerability note CVE-2012-2747 CVE-2012-2748

Joomla: two vulnerabilities

Synthesis of the vulnerability

An attacker can use two vulnerabilities of Joomla, in order to obtain information or to elevate his privileges.
Impacted products: Joomla.
Severity: 2/4.
Creation date: 19/06/2012.
Identifiers: 20120601, 20120602, BID-54073, CERTA-2012-AVI-344, CVE-2012-2747, CVE-2012-2748, VIGILANCE-VUL-11724.

Description of the vulnerability

Two vulnerabilities were announced in Joomla.

An attacker can elevate his privileges. [severity:2/4; 20120601, CVE-2012-2747]

An attacker can generate a SQL error, containing sensitive information. [severity:1/4; 20120602, CVE-2012-2748]
Complete Vigil@nce bulletin.... (free access)

Share this bulletin

Computer vulnerabilities tracking service

Vigil@nce provides network vulnerability patches. Each administrator can customize the list of products for which he wants to receive vulnerability alerts. The Vigil@nce vulnerability database contains several thousand vulnerabilities. The Vigil@nce security watch publishes vulnerability bulletins about threats impacting the information system.