Vulnerabilities > Joomla > Joomla > 1.5.5

DATE CVE VULNERABILITY TITLE RISK
2008-09-18 CVE-2008-4103 Improper Input Validation vulnerability in Joomla COM Mailto
The mailto (aka com_mailto) component in Joomla! 1.5 before 1.5.7 sends e-mail messages without validating the URL, which allows remote attackers to transmit spam.
network
low complexity
joomla CWE-20
5.0
2008-09-18 CVE-2008-4102 Numeric Errors vulnerability in Joomla
Joomla! 1.5 before 1.5.7 initializes PHP's PRNG with a weak seed, which makes it easier for attackers to guess the pseudo-random values produced by PHP's mt_rand function, as demonstrated by guessing password reset tokens, a different vulnerability than CVE-2008-3681.
network
low complexity
joomla CWE-189
7.5