PT-2008-4644 · Joomla · Joomla!

Hanno Böck · Published 2008-07-18 · Updated 2022-05-01 · CVE-2008-3228

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Joomla! versions prior to 1.5.4

Description: The issue concerns the configuration of .htaccess files to apply security checks for SEF URLs, which may leave them open to common exploits. The impact and specifics of remote attack vectors are not detailed.

Recommendations: For versions prior to 1.5.4, update to version 1.5.4 or later to ensure .htaccess is properly configured to block common exploits for SEF URLs.

Fix

Weakness Enumeration

CWE-16

Related Identifiers

CVE-2008-3228

GHSA-MXR8-PCPG-M23J

Affected Products

Joomla!

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2008-3228 · Security Note
• https://osv.dev/vulnerability/GHSA-mxr8-pcpg-m23j · Vendor Advisory
• https://github.com/joomla/joomla-platform · Note
• http://joomla.org/content/view/5180/1 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3228 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44206 · Note
• https://web.archive.org/web/20080730154423/http://joomla.org/content/view/5180/1 · Note
• http://openwall.com/lists/oss-security/2008/07/12/2 · Note
• http://joomla.org/content/view/5180/1/1/1/#htaccess · Note