CVE-2007-6644: Joomla! Joomla

Medium severity, CVSS 6.5. EPSS: 2% chance of exploitation in the next 30 days.

Joomla! before 1.5 RC4 allows remote authenticated administrators to promote arbitrary users to the administrator group, in violation of the intended security model.

Affected products

• Joomla! Joomla: version 1.5rc4 only

Published 2008-01-04. Last modified 2026-06-16.