CVE-2008-4103

EPSS 0.04%
Published 18.09.2008 17:59:32
Last modified 09.04.2025 00:30:58
Source cve@mitre.org
Teams watchlist Login
Open Login

The mailto (aka com_mailto) component in Joomla! 1.5 before 1.5.7 sends e-mail messages without validating the URL, which allows remote attackers to transmit spam.

Affected products Warnungen 0 Metrics 2 CWE 1 References 10

Data is provided by the National Vulnerability Database (NVD)

Joomla ≫ Com Mailto

   Joomla ≫ Com Mailto
   Joomla ≫ Com Mailto
   Joomla ≫ Com Mailto
   Joomla ≫ Com Mailto
   Joomla ≫ Com Mailto
   Joomla ≫ Com Mailto
   Joomla ≫ Com Mailto

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.04%	0.118

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://marc.info/?l=oss-security&m=122115344915232&w=2

http://marc.info/?l=oss-security&m=122118210029084&w=2

http://marc.info/?l=oss-security&m=122152798516853&w=2

http://secunia.com/advisories/31789

http://developer.joomla.org/security/news/273-20080903-core-commailto-spam.html

http://securityreason.com/securityalert/4275

https://exchange.xforce.ibmcloud.com/vulnerabilities/45070

https://nvd.nist.gov/vuln/detail/CVE-2008-4103

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2008-4103

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2008-4103

EUVD