GitHub Advisoryadvisory · Packagist
GHSA-mxr8-pcpg-m23j Joomla! doesn't configure .htaccess to apply certain security checks that "block common exploits" to SEF URLs
MEDIUM
Official page ↗
- Aliases
- CVE-2008-3228
- Ecosystem
- Packagist
- Packages
- joomla/joomla-platform
- Severity
- Moderate
- Reviewed
- 2025-04-09
Affected packages
• Packagist joomla/joomla-platform: < 1.5.4 → fixed in 1.5.4
Description
Joomla! before 1.5.4 does not configure .htaccess to apply certain security checks that "block common exploits" to SEF URLs, which has unknown impact and remote attack vectors.
Related
Alias · CVE (1)
- CVE-2008-3228 Joomla! vulnerability
References
- https://nvd.nist.gov/vuln/detail/CVE-2008-3228 advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44206 web
- https://github.com/joomla/joomla-platform package
- https://web.archive.org/web/20080730154423/http://www.joomla.org/content/view/5180/1 web
- http://www.joomla.org/content/view/5180/1/1/1/#htaccess web
- http://www.openwall.com/lists/oss-security/2008/07/12/2 web