← All advisories

High severityNVD Advisory· Published Dec 16, 2015· Updated Jun 17, 2026

CVE-2015-8566

CVE-2015-8566

Description

The Session package 1.x before 1.3.1 for Joomla! Framework allows remote attackers to execute arbitrary code via unspecified session values.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
joomla/sessionPackagist	< 1.3.1	1.3.1

Affected products

2

Joomla/Session
cpe:2.3:a:joomla:session:1.3.0:*:*:*:*:*:*:*
ghsa-coords
pkg:composer/joomla/session
Range: < 1.3.1

Patches

Vulnerability mechanics

References

6

developer.joomla.org/security-centre/637-20151205-session-remote-code-execution-vulnerability.htmlnvdVendor AdvisoryWEB
github.com/advisories/GHSA-wwfh-28hx-w2r2ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2015-8566ghsaADVISORY
github.com/FriendsOfPHP/security-advisories/blob/master/joomla/session/CVE-2015-8566.yamlghsaWEB
web.archive.org/web/20160603093633/http://www.securityfocus.com/bid/79197ghsaWEB
www.securityfocus.com/bid/79197nvd

News mentions

0

No linked articles in our index yet.