CVE-2008-4105

JRequest in Joomla! 1.5 before 1.5.7 does not sanitize variables that were set with JRequest::setVar, which allows remote attackers to conduct "variable injection" attacks and have unspecified other impact.

🔗 References (16)

• cve@mitrehttp://developer.joomla.org/security/news/271-20080901-core-jrequest-variable-injection.html
• cve@mitrehttp://marc.info/?l=oss-security&m=122115344915232&w=2
• cve@mitrehttp://marc.info/?l=oss-security&m=122118210029084&w=2
• cve@mitrehttp://marc.info/?l=oss-security&m=122152798516853&w=2
• cve@mitrehttp://secunia.com/advisories/31789
• cve@mitrehttp://securityreason.com/securityalert/4275
• cve@mitrehttp://securitytracker.com/id?1020843
• cve@mitrehttps://exchange.xforce.ibmcloud.com/vulnerabilities/45069
• af854a3a-2127-422b-91ae-364da2661108http://developer.joomla.org/security/news/271-20080901-core-jrequest-variable-injection.html
• af854a3a-2127-422b-91ae-364da2661108http://marc.info/?l=oss-security&m=122115344915232&w=2
• af854a3a-2127-422b-91ae-364da2661108http://marc.info/?l=oss-security&m=122118210029084&w=2
• af854a3a-2127-422b-91ae-364da2661108http://marc.info/?l=oss-security&m=122152798516853&w=2
• af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/31789
• af854a3a-2127-422b-91ae-364da2661108http://securityreason.com/securityalert/4275
• af854a3a-2127-422b-91ae-364da2661108http://securitytracker.com/id?1020843