Approved changes feed: RSS · Atom

cpe:2.3:a:joomla:joomla:1.5rc4:*:*:*:*:*:*:*

part: a version: 1.5rc4 update: *

VendorJoomla (6fa59c4b-5b62-59b9-bce0-735b9b6b6c51)
ProductJoomla (a68d2bfc-d726-582b-ab78-44558d52dbc2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/joomla/joomla-cms purl2cpe 2026-06-01 10:18:16.361747
pkg:rpm/opensuse/joomla purl2cpe 2026-06-01 10:18:16.361749
pkg:sourceforge/joomla.mirror purl2cpe 2026-06-01 10:18:16.361751

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-3215 not_vulnerable 2026-06-08 04:51:32.882644 Details available
SQL injection vulnerability in IXXO Cart Standalone before 3.9.6.1, and the IXXO Cart component for Joomla! 1.0.x, allows remote attackers to execute arbitrary SQL commands via the parent parameter.
Published: 2009-09-16T19:00:00.000Z
Updated: 2024-08-07T06:22:23.155Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-6299 vulnerable 2026-06-08 04:50:54.784884 Details available
Multiple cross-site scripting (XSS) vulnerabilities in Joomla! 1.5.7 and earlier allow remote authenticated users with certain privileges to inject arbitrary web script or HTML via (1) the title and description parameters to the com_weblinks module and (2) unspecified vectors in the com_content module related to "article submission."
Published: 2009-02-26T16:00:00.000Z
Updated: 2024-08-07T11:27:35.064Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-6645 vulnerable 2026-06-08 04:50:09.253045 Details available
Unspecified vulnerability in Joomla! before 1.5 RC4 allows remote authenticated users to gain privileges via unspecified vectors, aka "registered user privilege escalation vulnerability."
Published: 2008-01-04T01:00:00.000Z
Updated: 2024-08-07T16:11:06.122Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-6644 vulnerable 2026-06-08 04:50:09.252735 Details available
Joomla! before 1.5 RC4 allows remote authenticated administrators to promote arbitrary users to the administrator group, in violation of the intended security model.
Published: 2008-01-04T01:00:00.000Z
Updated: 2024-08-07T16:11:06.151Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-6643 vulnerable 2026-06-08 04:50:09.252424 Details available
Cross-site scripting (XSS) vulnerability in the com_poll component in Joomla! before 1.5 RC4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2008-01-04T01:00:00.000Z
Updated: 2024-08-07T16:11:06.123Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-6642 vulnerable 2026-06-08 04:50:09.252020 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.