← Back

CVE-2008-6299

nvd nist
Published: Feb 26, 2009Modified: Apr 23, 2026

JSON object

Loading...
3.5
Vector
AV:N/AC:M/Au:S/C:N/I:P/A:N
Exploitability: 6.8 / Impact: 2.9
Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in Joomla! 1.5.7 and earlier allow remote authenticated users with certain privileges to inject arbitrary web script or HTML via (1) the title and description parameters to the com_weblinks module and (2) unspecified vectors in the com_content module related to "article submission."

Affected (35)

Products: Joomla: Joomla
1 product
Joomla
Configuration A
35 vulnerable
Vulnerable SoftwareAffected Versions
Joomla
Up to 1.5.7
Version 1.0.0
Version 1.0.10
Version 1.0.11
Version 1.0.12
Version 1.0.13
Version 1.0.14
Version 1.0.1
Version 1.0.2
Version 1.0.3
Version 1.0.4
Version 1.0.5
Version 1.0.6
Version 1.0.7
Version 1.0.8
Version 1.0.9
Version 1.03
Version 1.0
Version 1.5.0 beta1
Version 1.5.0 beta2
Version 1.5.0 beta
Version 1.5.0 rc1
Version 1.5.0_beta1
Version 1.5.0_beta2
Version 1.5.0_beta
Version 1.5.0_rc1
Version 1.5.1
Version 1.5.2
Version 1.5.3
Version 1.5.4
Version 1.5.5
Version 1.5.6
Version 1.5
Version 1.5rc3
Version 1.5rc4

References (14)

Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.