CVE-2008-3225 Joomla! before 1.5.4 allows attackers to access administration functionality, which has unknown impact and attack vectors related to a missing "LDAP security fix."
HighCVSS 10.0
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Joomla! before 1.5.4 allows attackers to access administration functionality, which has unknown impact and attack vectors related to a missing "LDAP security fix."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| joomla | <= 1.5.3 | No fix listed |
| joomla | = 1.0 | No fix listed |
| joomla | = 1.0.0 | No fix listed |
| joomla | = 1.0.1 | No fix listed |
| joomla | = 1.0.2 | No fix listed |
| joomla | = 1.0.3 | No fix listed |
| joomla | = 1.0.4 | No fix listed |
| joomla | = 1.0.5 | No fix listed |
| joomla | = 1.0.6 | No fix listed |
| joomla | = 1.0.7 | No fix listed |
| joomla | = 1.0.8 | No fix listed |
| joomla | = 1.0.9 | No fix listed |
| joomla | = 1.0.10 | No fix listed |
| joomla | = 1.0.11 | No fix listed |
| joomla | = 1.0.12 | No fix listed |
| joomla | = 1.0.13 | No fix listed |
| joomla | = 1.03 | No fix listed |
| joomla | = 1.5 | No fix listed |
| joomla | = 1.5.0_beta | No fix listed |
| joomla | = 1.5.0_beta1 | No fix listed |
| joomla | = 1.5.0_beta2 | No fix listed |
| joomla | = 1.5.0_rc1 | No fix listed |
| joomla | = 1.5.1 | No fix listed |
| joomla | = 1.5.2 | No fix listed |
References
- www.joomla.org patch
- [oss-security] 20080712 CVE requests: joomla <1.5.4 mailing-list
- 30125 vdb-entry
- joomla-ldap-unauth-access(43648) vdb-entry