PT-2008-4643 · Open Source Matters · Joomla!

Hanno Böck · Published 2008-07-18 · Updated 2022-05-01 · CVE-2008-3227

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Joomla! versions prior to 1.5.4

Description: The issue is related to a "User Redirect Spam fix" and possibly an open redirect vulnerability, with unknown impact and attack vectors.

Recommendations: For versions prior to 1.5.4, update to version 1.5.4 or later to resolve the issue.

Fix

Link Following

Weakness Enumeration

CWE-59

Related Identifiers

CVE-2008-3227

GHSA-GM5Q-2CX5-WR2J

Affected Products

Joomla!

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2008-3227 · Security Note
• https://osv.dev/vulnerability/GHSA-gm5q-2cx5-wr2j · Vendor Advisory
• https://github.com/joomla/joomla-framework · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3227 · Note
• http://joomla.org/content/view/5180/1 · Note
• https://web.archive.org/web/20080501000000*/http://joomla.org/content/view/5180/1 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44205 · Note
• http://openwall.com/lists/oss-security/2008/07/12/2 · Note