← Database

CVE-2008-4105

HIGH CVSS: 7.5 Published: 2008-09-18 Modified: 2026-06-16

Description

JRequest in Joomla! 1.5 before 1.5.7 does not sanitize variables that were set with JRequest::setVar, which allows remote attackers to conduct "variable injection" attacks and have unspecified other impact.

Affected Platforms

Joomla Joomla

Weakness Type

CWE-20

References