PT-2008-5408 · Open Source Matters · Joomla!

Emanuele Gentili · Publicado 2008-09-18 · Atualizado 2017-08-08 · CVE-2008-4105

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Joomla! versions prior to 1.5.7

Description The issue allows remote attackers to conduct "variable injection" attacks due to the lack of sanitization of variables set with JRequest::setVar in JRequest. This can have unspecified other impact.

Recommendations For versions prior to 1.5.7, update to version 1.5.7 or later to resolve the issue.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2008-4105

Produtos afetados

Joomla!

Referências · 10

• http://secunia.com/advisories/31789 · Nota
• http://securitytracker.com/id?1020843 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-4105 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4105 · Nota
• http://developer.joomla.org/security/news/271-20080901-core-jrequest-variable-injection.html · Nota
• http://marc.info/?l=oss-security&m=122118210029084&w=2 · Nota
• http://securityreason.com/securityalert/4275 · Nota
• http://marc.info/?l=oss-security&m=122115344915232&w=2 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45069 · Nota
• http://marc.info/?l=oss-security&m=122152798516853&w=2 · Nota