CVE-2008-3228: Joomla! Joomla

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

Joomla! before 1.5.4 does not configure .htaccess to apply certain security checks that "block common exploits" to SEF URLs, which has unknown impact and remote attack vectors.

Affected products

• Joomla! Joomla: up to and including 1.5.3; version 1.0 only; version 1.0.0 only; version 1.0.1 only; version 1.0.2 only; version 1.0.3 only; …

Published 2008-07-18. Last modified 2026-06-16.