Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

Joomla! Multiple Remote Vulnerabilites and Weaknesses

Joomla! CMS is prone to multiple remote vulnerabilities and a weakness, including:

- An RNG (random number generator) weakness.
- A security vulnerability that may allow attackers to send unsolicited spam email.
- A URL-redirection vulnerability.
- An input-validation vulnerability.

Remote attackers can exploit these issues to send unsolicited spam email, redirect victims to attacker-controlled sites, and conduct phishing attacks. Attackers can also exploit the RNG weakness to aid in brute-force attacks. Other attacks are also possible.

Versions prior to Joomla! 1.5.7 are vulnerable.







 

Privacy Statement
Copyright 2009, SecurityFocus