Description

Joomla! before 1.5.4 does not configure .htaccess to apply certain security checks that "block common exploits" to SEF URLs, which has unknown impact and remote attack vectors.

Remediation

References

CVE-2008-3228

Related Vulnerabilities

WordPress Plugin Client Invoicing by Sprout Invoices-Easy Estimates and Invoices for WordPress Security Bypass (9.3)

WebLogic Deserialization of Untrusted Data Vulnerability (CVE-2020-11113)

Oracle Application Server Other Vulnerability (CVE-2002-1089)

Drupal Core 9.0.x Information Disclosure (9.0.0 - 9.0.5)

WordPress Plugin Two Factor Authentication Cross-Site Request Forgery (1.3.12)

Severity

High

Classification

CVE-2008-3228

Tags

Missing Update Known Vulnerabilities