Description

JRequest in Joomla! 1.5 before 1.5.7 does not sanitize variables that were set with JRequest::setVar, which allows remote attackers to conduct "variable injection" attacks and have unspecified other impact.

Remediation

References

CVE-2008-4105

Related Vulnerabilities

Atlassian Confluence Improper Input Validation Vulnerability (CVE-2018-13389)

WordPress Plugin Elementor Website Builder Cross-Site Scripting (2.9.9)

Oracle JRE CVE-2013-5783 Vulnerability (CVE-2013-5783)

WordPress Plugin ShortPixel Adaptive Images-WebP, AVIF, CDN, Image Optimization Cross-Site Scripting (3.6.2)

WordPress 4.1.x PHP Object Injection (4.1 - 4.1.32)

Severity

High

Classification

CVE-2008-4105 CWE-20

Tags

Missing Update Known Vulnerabilities