← Database

CVE-2007-6644

MEDIUM CVSS: 6.5 Published: 2008-01-04 Modified: 2026-06-16

Description

Joomla! before 1.5 RC4 allows remote authenticated administrators to promote arbitrary users to the administrator group, in violation of the intended security model.

Affected Platforms

Joomla Joomla

Weakness Type

CWE-264

References