CVE-2012-2747

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Unspecified vulnerability in Joomla! 2.5.x before 2.5.5 allows remote attackers to gain privileges via unknown attack vectors related to "Inadequate checking."

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://developer.joomla.org/security/news/470-20120601-core-privilege-escalationVendor Advisory
http://osvdb.org/83070Broken Link
http://secunia.com/advisories/49605Third Party Advisory
http://www.joomla.org/announcements/release-news/5427-joomla-255-released.htmlVendor Advisory
http://www.openwall.com/lists/oss-security/2012/06/19/2Mailing List, Third Party Advisory
http://www.securityfocus.com/bid/54073Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/76415Third Party Advisory, VDB Entry
http://developer.joomla.org/security/news/470-20120601-core-privilege-escalationVendor Advisory
http://osvdb.org/83070Broken Link
http://secunia.com/advisories/49605Third Party Advisory
http://www.joomla.org/announcements/release-news/5427-joomla-255-released.htmlVendor Advisory
http://www.openwall.com/lists/oss-security/2012/06/19/2Mailing List, Third Party Advisory
http://www.securityfocus.com/bid/54073Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/76415Third Party Advisory, VDB Entry

Timeline

Published: Jul 3, 2012
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2012

CVE-2012-27485.0Unspecified vulnerability in Joomla! 2.5.x before 2.5.5 allows remote attackers to obtain sensitive information via vectors related to "Inad CVE-2012-27494.0MySQL 5.1.x before 5.1.63 and 5.5.x before 5.5.24 allows remote authenticated users to cause a denial of service (mysqld crash) via vectors CVE-2012-275010.0Unspecified vulnerability in MySQL 5.5.x before 5.5.23 has unknown impact and attack vectors related to a "Security Fix", aka Bug #59533. NO CVE-2012-27514.3ModSecurity before 2.6.6, when used with PHP, does not properly handle single quotes not at the beginning of a request parameter value in th CVE-2012-27527.2Untrusted search path vulnerability in VMware vMA 4.x and 5.x before 5.0.0.2 allows local users to gain privileges via a Trojan horse DLL in CVE-2012-27536.9Untrusted search path vulnerability in TrGUI.exe in the Endpoint Connect (aka EPC) GUI in Check Point Endpoint Security R73.x and E80.x on t CVE-2012-27594.3Cross-site scripting (XSS) vulnerability in login-with-ajax.php in the Login With Ajax (aka login-with-ajax) plugin before 3.0.4.1 for WordP CVE-2012-27602.1mod_auth_openid before 0.7 for Apache uses world-readable permissions for /tmp/mod_auth_openid.db, which allows local users to obtain sessio CVE-2012-27627.5SQL injection vulnerability in include/functions_trackbacks.inc.php in Serendipity 1.6.2 allows remote attackers to execute arbitrary SQL co CVE-2012-27637.5Buffer overflow in the readstr_upto function in plug-ins/script-fu/tinyscheme/scheme.c in GIMP 2.6.12 and earlier, and possibly 2.6.13, allo CVE-2012-27647.2Untrusted search path vulnerability in Google Chrome before 20.0.1132.43 on Windows might allow local users to gain privileges via a Trojan CVE-2012-27684.3Multiple cross-site scripting (XSS) vulnerabilities in the topic administration page in the RTFM extension 2.0.4 through 2.4.3 for Best Prac