Description
Multiple open redirect vulnerabilities in Joomla! 1.5 before 1.5.7 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a "passed in" URL.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | joomla/framework | >= 1.5.0, < 1.5.7 | 1.5.7 | GHSA-9qr2-fx2g-pfvh |
References
- joomla-url-phishing(45071) vdb-entry
- [oss-security] 20080916 Re: CVE request: joomla < 1.5.7 mailing-list
- http://developer.joomla.org/security/news/274-20080904-core-redirect-spam.html
- [oss-security] 20080911 CVE request: joomla < 1.5.7 mailing-list
- 4275 third-party-advisory
- [oss-security] 20080911 CVE request for Joomla multiple vuln. mailing-list