CVE-2008-3227 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	7.5 UNKNOWN	NETWORK	LOW		AV:N/AC:L/Au:N/C:P/I:P/A:P

Base Score

CVSS 3.x

EPSS Score

Percentile: 13%

Affected Products (NVD)

Vendor	Product	Version
joomla	joomla	𝑥 ≤ 1.5.3
joomla	joomla	1.0
joomla	joomla	1.0.0
joomla	joomla	1.0.1
joomla	joomla	1.0.2
joomla	joomla	1.0.3
joomla	joomla	1.0.4
joomla	joomla	1.0.5
joomla	joomla	1.0.6
joomla	joomla	1.0.7
joomla	joomla	1.0.8
joomla	joomla	1.0.9
joomla	joomla	1.0.10
joomla	joomla	1.0.11
joomla	joomla	1.0.12
joomla	joomla	1.0.13
joomla	joomla	1.03
joomla	joomla	1.5
joomla	joomla	1.5.0_beta:_beta
joomla	joomla	1.5.0_beta1:_beta1
joomla	joomla	1.5.0_beta2:_beta2
joomla	joomla	1.5.0_rc1:_rc1
joomla	joomla	1.5.1
joomla	joomla	1.5.2

𝑥

= Vulnerable software versions

Common Weakness Enumeration

CWE-59 - Improper Link Resolution Before File Access ('Link Following')
The software attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

References

http://www.joomla.org/content/view/5180/1/

http://www.openwall.com/lists/oss-security/2008/07/12/2

https://exchange.xforce.ibmcloud.com/vulnerabilities/44205

http://www.joomla.org/content/view/5180/1/

http://www.openwall.com/lists/oss-security/2008/07/12/2

https://exchange.xforce.ibmcloud.com/vulnerabilities/44205