CVE-2012-5827: Joomla! 2.5.x before 2.5.8 and 3.0.x before 3.0.2 allows remote attackers to conduct clickjacking attacks via unspecified vectors involving "Inadequate protection."

Unscored severity · published Nov 11, 2012

CVE-2012-5827

Joomla! 2.5.x before 2.5.8 and 3.0.x before 3.0.2 allows remote attackers to conduct clickjacking attacks via unspecified vectors involving "Inadequate protection."

–

CVSS

1.3%

EPSS

On KEV

Exploitation

Is it being used?

Exploit prediction (EPSS)1.3% · higher than 70% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

Joomla · Joomla

2.5.0; 2.5.1; 2.5.2; 2.5.3; 2.5.4; 2.5.5; +2 more · source: NVD

Affected product

Joomla

All Joomla CVEs

References

NVD

https://nvd.nist.gov/vuln/detail/CVE-2012-5827

CVE.org

https://www.cve.org/CVERecord?id=CVE-2012-5827

developer.joomla.org

http://developer.joomla.org/security/news/543-20121101-core-clickjacking.html

Vendor Advisory

http://developer.joomla.org/security/news/544-20121102-core-clickjacking.html

Vendor Advisory

http://secunia.com/advisories/51187

www.securityfocus.com

http://www.securityfocus.com/bid/56397

www.securitytracker.com

http://www.securitytracker.com/id?1027744

exchange.xforce.ibmcloud.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/79925