GHSA-9qr2-fx2g-pfvhmedium
Joomla! Open Redirect vulnerability
Impact
Multiple open redirect vulnerabilities in Joomla! 1.5 before 1.5.7 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a "passed in" URL.
Source excerpt · OSVAffected packages
Start with the recorded fix for your release branch. Check your installed version and test compatibility before upgrading. Fixing this advisory does not rule out other vulnerabilities in the release.
joomla/framework Packagist
| Affected range | Recorded fix |
|---|---|
| From 1.5.0 before 1.5.7Ecosystem versions | 1.5.7 |
Version evidence: OSV · GHSA-9qr2-fx2g-pfvh
View original version evidence (0 explicit versions)
Original source description
Multiple open redirect vulnerabilities in Joomla! 1.5 before 1.5.7 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a "passed in" URL.
References
- Security advisory nvd.nist.gov/vuln/detail/CVE-2008-4104
- Security advisory exchange.xforce.ibmcloud.com/vulnerabilities/45071
- Source reference github.com/joomla/joomla-framework
- Security advisory web.archive.org/web/20081219152017/http://developer.joomla.org/security/news/274-20080904-core-redirect-spam.html
- Source reference marc.info/
- Source reference marc.info/
- Source reference marc.info/
- Security advisory securityreason.com/securityalert/4275