Description

Joomla! before 1.5.4 does not configure .htaccess to apply certain security checks that "block common exploits" to SEF URLs, which has unknown impact and remote attack vectors.

Remediation

References

CVE-2008-3228

Related Vulnerabilities

PHP Other Vulnerability (CVE-2007-4658)

WordPress Denial of Service Vulnerability (3.5 - 3.6.1)

WordPress Plugin NextMove Lite-Thank You Page for WooCommerce Cross-Site Request Forgery (2.18.1)

CrushFTP Server Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-14036)

Nginx Uncontrolled Resource Consumption Vulnerability (CVE-2023-44487)

Severity

High

Classification

CVE-2008-3228

Tags

Missing Update Known Vulnerabilities