PT-2008-5408 · Open Source Matters · Joomla!

Emanuele Gentili · Published 2008-09-18 · Updated 2017-08-08 · CVE-2008-4105

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Joomla! versions prior to 1.5.7

Description The issue allows remote attackers to conduct "variable injection" attacks due to the lack of sanitization of variables set with JRequest::setVar in JRequest. This can have unspecified other impact.

Recommendations For versions prior to 1.5.7, update to version 1.5.7 or later to resolve the issue.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2008-4105

Affected Products

Joomla!

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2008-4105 · Security Note
• http://secunia.com/advisories/31789 · Note
• http://securitytracker.com/id?1020843 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4105 · Note
• http://developer.joomla.org/security/news/271-20080901-core-jrequest-variable-injection.html · Note
• http://marc.info/?l=oss-security&m=122118210029084&w=2 · Note
• http://securityreason.com/securityalert/4275 · Note
• http://marc.info/?l=oss-security&m=122115344915232&w=2 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45069 · Note
• http://marc.info/?l=oss-security&m=122152798516853&w=2 · Note