CVE-2008-4104: Joomla! Joomla

Medium severity, CVSS 5.8. EPSS: 1.4% chance of exploitation in the next 30 days.

Multiple open redirect vulnerabilities in Joomla! 1.5 before 1.5.7 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a "passed in" URL.

Affected products

• Joomla! Joomla: version 1.5 only; version 1.5.1 only; version 1.5.2 only; version 1.5.3 only; version 1.5.4 only; version 1.5.5 only; …

Published 2008-09-18. Last modified 2026-06-16.