Exploitation Summary
EIP tracks 1 public exploit for CVE-2013-3242. PoCs published by EgiX.
AI-analyzed exploit summary This is a detailed writeup describing a PHP object injection vulnerability in Joomla! versions 3.0.3 and earlier, as well as 2.5.9 and earlier. The vulnerability arises from improper sanitization of user input passed through cookies, leading to arbitrary PHP object injection via unserialize().
Description
plugins/system/remember/remember.php in Joomla! 2.5.x before 2.5.10 and 3.0.x before 3.0.4 does not properly handle an object obtained by unserializing a cookie, which allows remote authenticated users to conduct PHP object injection attacks and cause a denial of service via unspecified vectors.
Exploits (1)
This is a detailed writeup describing a PHP object injection vulnerability in Joomla! versions 3.0.3 and earlier, as well as 2.5.9 and earlier. The vulnerability arises from improper sanitization of user input passed through cookies, leading to arbitrary PHP object injection via unserialize().