| Package | Affected versions | Patched versions |
|---|---|---|
| joomla | = 1.5= 1.5.1= 1.5.2= 1.5.3= 1.5.4= 1.5.5= 1.5.6 |
JRequest in Joomla! 1.5 before 1.5.7 does not sanitize variables that were set with JRequest::setVar, which allows remote attackers to conduct "variable injection" attacks and have unspecified other impact.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free