← Database

CVE-2008-6882

HIGH CVSS: 7.5 Published: 2009-07-30 Modified: 2026-06-16

Description

Live Chat (com_livechat) component 1.0 for Joomla! allows remote attackers to use the xmlhttp.php script as an open HTTP proxy to hide network scanning activities or scan internal networks via a GET request with a full URL in the query string.

Affected Platforms

Joompolitan Com LivechatJoomla Joomla

Weakness Type

CWE-20

References