Approved changes feed: RSS · Atom

cpe:2.3:a:joomla:joomla:1.5.1:*:*:*:*:*:*:*

part: a version: 1.5.1 update: *

VendorJoomla (6fa59c4b-5b62-59b9-bce0-735b9b6b6c51)
ProductJoomla (a68d2bfc-d726-582b-ab78-44558d52dbc2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/joomla/joomla-cms purl2cpe 2026-06-01 10:18:16.330376
pkg:rpm/opensuse/joomla purl2cpe 2026-06-01 10:18:16.330378
pkg:sourceforge/joomla.mirror purl2cpe 2026-06-01 10:18:16.330380

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-3215 not_vulnerable 2026-06-08 04:51:32.880271 Details available
SQL injection vulnerability in IXXO Cart Standalone before 3.9.6.1, and the IXXO Cart component for Joomla! 1.0.x, allows remote attackers to execute arbitrary SQL commands via the parent parameter.
Published: 2009-09-16T19:00:00.000Z
Updated: 2024-08-07T06:22:23.155Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1940 vulnerable 2026-06-08 04:51:25.876379 Details available
Cross-site scripting (XSS) vulnerability in the administrator panel in the com_users core component for Joomla! 1.5.x through 1.5.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2009-06-05T18:13:00.000Z
Updated: 2024-08-07T05:27:54.849Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1939 vulnerable 2026-06-08 04:51:25.875691 Details available
Cross-site scripting (XSS) vulnerability in the JA_Purity template for Joomla! 1.5.x through 1.5.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2009-06-05T18:13:00.000Z
Updated: 2024-08-07T05:27:54.890Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1938 vulnerable 2026-06-08 04:51:25.868545 Details available
Cross-site scripting (XSS) vulnerability in Joomla! 1.5.x through 1.5.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to database output and the frontend administrative panel.
Published: 2009-06-05T18:13:00.000Z
Updated: 2024-08-07T05:27:54.978Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1280 vulnerable 2026-06-08 04:51:14.307672 Details available
Multiple cross-site request forgery (CSRF) vulnerabilities in the com_media component for Joomla! 1.5.x through 1.5.9 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors.
Published: 2009-04-09T16:00:00.000Z
Updated: 2024-08-07T05:04:49.550Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1279 vulnerable 2026-06-08 04:51:14.303759 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0113 not_vulnerable 2026-06-08 04:51:07.684651 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-6299 vulnerable 2026-06-08 04:50:54.781547 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-4105 vulnerable 2026-06-08 04:50:37.829686 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-4104 vulnerable 2026-06-08 04:50:37.829179 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-4103 not_vulnerable 2026-06-08 04:50:37.828616 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-4102 vulnerable 2026-06-08 04:50:37.822284 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3228 vulnerable 2026-06-08 04:50:33.515072 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3227 vulnerable 2026-06-08 04:50:33.514190 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3226 vulnerable 2026-06-08 04:50:33.513354 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3225 vulnerable 2026-06-08 04:50:33.511925 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.