{"id":"CVE-2008-4104","aliases":[],"url":"https://o3.security/vulnerability/CVE-2008-4104","summary":"Joomla! Open Redirect vulnerability","details":"Multiple open redirect vulnerabilities in Joomla! 1.5 before 1.5.7 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a \"passed in\" URL.","published":"2022-05-02T00:06:48Z","modified":"2024-02-09T17:11:39.068300Z","cvss":null,"epss":{"score":0.0137,"percentile":0.69809,"asOf":"2026-08-22"},"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"Packagist","name":"joomla/framework","fixedVersion":"1.5.7"}],"fix":null,"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2008-4104"},{"type":"WEB","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45071"},{"type":"PACKAGE","url":"https://github.com/joomla/joomla-framework"},{"type":"WEB","url":"https://web.archive.org/web/20081219152017/http://developer.joomla.org/security/news/274-20080904-core-redirect-spam.html"},{"type":"WEB","url":"http://marc.info/?l=oss-security&m=122115344915232&w=2"},{"type":"WEB","url":"http://marc.info/?l=oss-security&m=122118210029084&w=2"},{"type":"WEB","url":"http://marc.info/?l=oss-security&m=122152798516853&w=2"},{"type":"WEB","url":"http://securityreason.com/securityalert/4275"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2024-02-09T17:11:39.068300Z"}}