Description

Joomla! Core is prone to a spam vulnerability. Exploiting this issue may allow attackers to send spam through the affected website. Joomla! Core versions 1.5.x ranging from 1.5.0 and up to and including 1.5.22 are vulnerable.

Remediation

Update to Joomla! Core version 1.5.23 or latest

References

https://developer.joomla.org/joomlacode-archive/issue-24289.html

https://www.exploit-db.com/exploits/15979/

https://www.joomla.org/announcements/release-news/5367-joomla-1523-released.html

Related Vulnerabilities

WordPress Plugin YITH WooCommerce Recover Abandoned Cart Security Bypass (1.3.2)

WordPress Plugin Exxp Cross-Site Scripting (2.6.8)

Oracle HTTP Server Other Vulnerability (CVE-2004-2115)

WordPress Other Vulnerability (CVE-2007-1230)

MySQL Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2004-0836)

Severity

High

Classification

CWE-20 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Missing Update