Vulnerabilities > Joomla > Joomla > 1.0.13

DATE CVE VULNERABILITY TITLE RISK
2009-01-09 CVE-2009-0113 Path Traversal vulnerability in Joomla Xstandard
Directory traversal vulnerability in attachmentlibrary.php in the XStandard component for Joomla! 1.5.8 and earlier allows remote attackers to list arbitrary directories via a ..
network
low complexity
joomla CWE-22
5.0
2008-12-19 CVE-2008-5671 Code Injection vulnerability in Joomla 1.0.11/1.0.12/1.0.13
PHP remote file inclusion vulnerability in index.php in Joomla! 1.0.11 through 1.0.14, when RG_EMULATION is enabled in configuration.php, allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.
network
low complexity
joomla CWE-94
7.5
2008-07-18 CVE-2008-3228 Configuration vulnerability in Joomla
Joomla! before 1.5.4 does not configure .htaccess to apply certain security checks that "block common exploits" to SEF URLs, which has unknown impact and remote attack vectors.
network
low complexity
joomla CWE-16
7.5
2008-07-18 CVE-2008-3227 Link Following vulnerability in Joomla
Unspecified vulnerability in Joomla! before 1.5.4 has unknown impact and attack vectors related to a "User Redirect Spam fix," possibly an open redirect vulnerability.
network
low complexity
joomla CWE-59
7.5
2008-07-18 CVE-2008-3226 Permissions, Privileges, and Access Controls vulnerability in Joomla
The file caching implementation in Joomla! before 1.5.4 allows attackers to access cached pages via unknown attack vectors.
network
low complexity
joomla CWE-264
5.0
2008-07-18 CVE-2008-3225 Permissions, Privileges, and Access Controls vulnerability in Joomla
Joomla! before 1.5.4 allows attackers to access administration functionality, which has unknown impact and attack vectors related to a missing "LDAP security fix."
network
low complexity
joomla CWE-264
critical
10.0