Description

Joomla! Core is prone to a variable injection vulnerability. Exploiting this issue may allow attackers to inject unwanted characters into returned data; other attacks with unspecified impact are also possible. Joomla! Core versions 1.5.x ranging from 1.5.0 and up to and including 1.5.6 are vulnerable.

Remediation

Update to Joomla! Core version 1.5.7 or latest

References

https://developer.joomla.org/security-centre/271-20080901-core-jrequest-variable-injection.html

Related Vulnerabilities

Apache Traffic Server Improper Input Validation Vulnerability (CVE-2018-1318)

MongoDb Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2021-32036)

Joomla! Core 4.x.x Multiple Vulnerabilities (4.0.0 - 4.2.6)

Jenkins Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2014-3664)

Apache HTTP Server CVE-2004-0786 Vulnerability (CVE-2004-0786)

Severity

High

Classification

CVE-2008-4105 CWE-20 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Tags

Missing Update