|Number of vulnerabilities||1|
|CVE ID|| CVE-2015-8562
|Public exploit||This vulnerability is being exploited in the wild.|
|Vulnerable software versions||
The vulnerability allows a remote attacker to execute arbitrary PHP code on the target system.
The vulnerability exists due to insufficient filtration of HTTP User-Agent header and filter-search HTTP POST parameter before storing them into database. A remote unauthenticated attacker can permanently inject and execute arbitrary PHP code on the target system with privileges of the web server.
Successful exploitation of this vulnerability will allow a remote attacker to gain complete control over the vulnerable web application and execute arbitrary PHP code on the target system.
Note: this is a zero-day vulnerability and it is being exploited in the wild.Remediation
Update your Joomla! installation to version 3.4.6.External links