VULNERABILITY INTELLIGENCE
CVE-2008-4105
CVSS score7.5 HIGH
EPSS probability1.70%
CISA KEVNot currently listed
Published2008-09-18
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Description
JRequest in Joomla! 1.5 before 1.5.7 does not sanitize variables that were set with JRequest::setVar, which allows remote attackers to conduct "variable injection" attacks and have unspecified other impact.
Weakness classification
- CWE-20: Improper Input Validation