Description

Joomla! Core is prone to a spam vulnerability. Exploiting this issue may allow attackers to send spam through the affected website. Joomla! Core versions 1.5.x ranging from 1.5.0 and up to and including 1.5.22 are vulnerable.

Remediation

Update to Joomla! Core version 1.5.23 or latest

References

https://developer.joomla.org/joomlacode-archive/issue-24289.html

https://www.exploit-db.com/exploits/15979/

https://www.joomla.org/announcements/release-news/5367-joomla-1523-released.html

Related Vulnerabilities

Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-6341)

e107 Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2012-6433)

MySQL CVE-2015-0438 Vulnerability (CVE-2015-0438)

Drupal Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2011-2715)

WordPress Plugin Post SMTP-WP SMTP with Email Logs & Mobile App for Failure Alerts-Any SMTP Plus Gmail SMTP, Office 365, Brevo, Mailgun, Amazon SES, Postmark SQL Injection (2.9.3)

Severity

High

Classification

CWE-20 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Missing Update