CVE-2008-3228

Joomla! before 1.5.4 does not configure .htaccess to apply certain security checks that "block common exploits" to SEF URLs, which has unknown impact and remote attack vectors.

Link	Resource
http://www.openwall.com/lists/oss-security/2008/07/12/2
http://www.joomla.org/content/view/5180/1/
http://www.joomla.org/content/view/5180/1/1/1/#htaccess
https://exchange.xforce.ibmcloud.com/vulnerabilities/44206

Configuration 1

cpe:2.3:a:joomla:joomla:1.0.13:*:*:*:*:*:*:* cpe:2.3:a:joomla:joomla:1.0.9:*:*:*:*:*:*:* cpe:2.3:a:joomla:joomla:1.5:*:*:*:*:*:*:* cpe:2.3:a:joomla:joomla:1.5.0_rc1:*:*:*:*:*:*:* cpe:2.3:a:joomla:joomla:1.5.0_beta2:*:*:*:*:*:*:* cpe:2.3:a:joomla:joomla:1.0:*:*:*:*:*:*:* cpe:2.3:a:joomla:joomla:1.5.2:*:*:*:*:*:*:* cpe:2.3:a:joomla:joomla:1.0.1:*:*:*:*:*:*:* cpe:2.3:a:joomla:joomla:1.0.3:*:*:*:*:*:*:* cpe:2.3:a:joomla:joomla:1.0.6:*:*:*:*:*:*:* cpe:2.3:a:joomla:joomla:1.0.8:*:*:*:*:*:*:* cpe:2.3:a:joomla:joomla:1.0.4:*:*:*:*:*:*:* cpe:2.3:a:joomla:joomla:1.0.2:*:*:*:*:*:*:* cpe:2.3:a:joomla:joomla:1.5.0_beta:*:*:*:*:*:*:* cpe:2.3:a:joomla:joomla:1.0.10:*:*:*:*:*:*:* cpe:2.3:a:joomla:joomla:1.5.0_beta1:*:*:*:*:*:*:* cpe:2.3:a:joomla:joomla:1.5.1:*:*:*:*:*:*:* cpe:2.3:a:joomla:joomla:1.0.12:*:*:*:*:*:*:* cpe:2.3:a:joomla:joomla:1.03:*:*:*:*:*:*:* cpe:2.3:a:joomla:joomla:1.0.5:*:*:*:*:*:*:* cpe:2.3:a:joomla:joomla:1.0.7:*:*:*:*:*:*:* cpe:2.3:a:joomla:joomla:1.0.0:*:*:*:*:*:*:* cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:* cpe:2.3:a:joomla:joomla:1.0.11:*:*:*:*:*:*:*

---

Published : 2008-07-18 04:41

Updated : 2017-08-08 01:31

---

NVD link : CVE-2008-3228

Mitre link : CVE-2008-3228

No products.

CWE-16