PT-2009-3814 · Open Source Matters · Joomla!

Publicado 2009-04-09 · Atualizado 2017-08-17 · CVE-2009-1280

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Joomla! versions 1.5.x through 1.5.9

Description The issue concerns multiple cross-site request forgery (CSRF) vulnerabilities in the com media component. These vulnerabilities allow remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Recommendations For versions 1.5.x through 1.5.9, update to a version that contains a fix for this issue.

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2009-1280

Produtos afetados

Joomla!

Referências · 5

• http://developer.joomla.org/security/news/293-20090301-core-multiple-xsscsrf.html · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/49656 · Nota
• http://secunia.com/advisories/34551 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1280 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-1280 · Nota de Segurança