Joomla! doesn't configure .htaccess to apply certain security checks that "block common exploits" to SEF URLs

ALTO 7.5CVE-2008-3228 · GHSA-mxr8-pcpg-m23j · Published 18/07/2008 · updated 16/06/2026

En resumen

CVE-2008-3228 es una vulnerabilidad ALTO (CVSS 7.5) que afecta a joomla/joomla-platform, joomla (joomla).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.2%, mayor que el 67.3% de las vulnerabilidades.
Solución: actualizar a 1.5.4 o posterior.

Package	Affected versions	Patched versions
joomla/joomla-platform Packagist	`< 1.5.4`	`1.5.4`
joomla joomla	`= 1.0= 1.0.0= 1.0.1= 1.0.10= 1.0.11= 1.0.12= 1.0.13= 1.0.2= 1.0.3= 1.0.4= 1.0.5= 1.0.6= 1.0.7= 1.0.8= 1.0.9= 1.03= 1.5= 1.5.0_beta= 1.5.0_beta1= 1.5.0_beta2= 1.5.0_rc1= 1.5.1= 1.5.2≤ 1.5.3`	No fix yet

Description

Joomla! before 1.5.4 does not configure .htaccess to apply certain security checks that "block common exploits" to SEF URLs, which has unknown impact and remote attack vectors.

NVD description

Joomla! before 1.5.4 does not configure .htaccess to apply certain security checks that "block common exploits" to SEF URLs, which has unknown impact and remote attack vectors.

References

nvd.nist.gov/vuln/detail/CVE-2008-3228 · ADVISORY
exchange.xforce.ibmcloud.com/vulnerabilities/44206 · WEB
joomla/joomla-platform · PACKAGE
web.archive.org/web/20080730154423/http://www.joomla.org/content/view/5180/1 · WEB
joomla.org/content/view/5180/1/1/1 · WEB
openwall.com/lists/oss-security/2008/07/12/2 · WEB
joomla.org/content/view/5180/1

Más vulnerabilidades de joomla/joomla-platform

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free