{"data":{"id":"CVE-2008-4104","cve_id":"CVE-2008-4104","title":"Joomla! Open Redirect vulnerability","summary":"Joomla! Open Redirect vulnerability","severity":"MEDIUM","cvss":{"score":5.8,"version":"2.0","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:P","source":"nvd"},"published_at":"2008-09-18T17:59:32.967000Z","modified_at":"2026-06-16T22:57:11.223000Z","withdrawn_at":null,"is_joomla":true,"is_joomla_core":true,"relevance":"certain","product":"Joomla CMS","extension":{"type":null,"name":null},"sources":["nvd","osv"],"source_count":2,"url":"https://cve.oyer.fr/cve/CVE-2008-4104","description":"Multiple open redirect vulnerabilities in Joomla! 1.5 before 1.5.7 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a \"passed in\" URL.","cwe":["CWE-59","CWE-601"],"affected":[{"package":null,"product":"joomla","vendor":"joomla","ecosystem":null,"cpe":"cpe:2.3:a:joomla:joomla:1.5:*:*:*:*:*:*:*","version_start":"1.5","version_end":"1.5","version_end_inclusive":true,"fixed_version":null,"type":"core","source":"nvd"},{"package":null,"product":"joomla","vendor":"joomla","ecosystem":null,"cpe":"cpe:2.3:a:joomla:joomla:1.5.1:*:*:*:*:*:*:*","version_start":"1.5.1","version_end":"1.5.1","version_end_inclusive":true,"fixed_version":null,"type":"core","source":"nvd"},{"package":null,"product":"joomla","vendor":"joomla","ecosystem":null,"cpe":"cpe:2.3:a:joomla:joomla:1.5.2:*:*:*:*:*:*:*","version_start":"1.5.2","version_end":"1.5.2","version_end_inclusive":true,"fixed_version":null,"type":"core","source":"nvd"},{"package":null,"product":"joomla","vendor":"joomla","ecosystem":null,"cpe":"cpe:2.3:a:joomla:joomla:1.5.3:*:*:*:*:*:*:*","version_start":"1.5.3","version_end":"1.5.3","version_end_inclusive":true,"fixed_version":null,"type":"core","source":"nvd"},{"package":null,"product":"joomla","vendor":"joomla","ecosystem":null,"cpe":"cpe:2.3:a:joomla:joomla:1.5.4:*:*:*:*:*:*:*","version_start":"1.5.4","version_end":"1.5.4","version_end_inclusive":true,"fixed_version":null,"type":"core","source":"nvd"},{"package":null,"product":"joomla","vendor":"joomla","ecosystem":null,"cpe":"cpe:2.3:a:joomla:joomla:1.5.5:*:*:*:*:*:*:*","version_start":"1.5.5","version_end":"1.5.5","version_end_inclusive":true,"fixed_version":null,"type":"core","source":"nvd"},{"package":null,"product":"joomla","vendor":"joomla","ecosystem":null,"cpe":"cpe:2.3:a:joomla:joomla:1.5.6:*:*:*:*:*:*:*","version_start":"1.5.6","version_end":"1.5.6","version_end_inclusive":true,"fixed_version":null,"type":"core","source":"nvd"},{"package":"joomla/framework","product":"joomla/framework","vendor":null,"ecosystem":"Packagist","cpe":null,"version_start":"1.5.0","version_end":"1.5.7","version_end_inclusive":false,"fixed_version":"1.5.7","type":null,"source":"osv"}],"references":[{"url":"http://developer.joomla.org/security/news/274-20080904-core-redirect-spam.html","title":null,"source":"nvd"},{"url":"http://marc.info/?l=oss-security&m=122115344915232&w=2","title":null,"source":"nvd"},{"url":"http://marc.info/?l=oss-security&m=122118210029084&w=2","title":null,"source":"nvd"},{"url":"http://marc.info/?l=oss-security&m=122152798516853&w=2","title":null,"source":"nvd"},{"url":"http://securityreason.com/securityalert/4275","title":null,"source":"nvd"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45071","title":null,"source":"nvd"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-4104","title":"ADVISORY","source":"osv"},{"url":"https://github.com/joomla/joomla-framework","title":"PACKAGE","source":"osv"},{"url":"https://web.archive.org/web/20081219152017/http://developer.joomla.org/security/news/274-20080904-core-redirect-spam.html","title":"WEB","source":"osv"}],"source_records":[{"source":"nvd","external_id":"CVE-2008-4104","url":"https://nvd.nist.gov/vuln/detail/CVE-2008-4104","severity":"MEDIUM","cvss_score":5.8,"cvss_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:P","cvss_version":"2.0","first_seen_at":"2026-09-26T09:27:06.821503Z","last_seen_at":"2026-09-26T09:34:00.898280Z"},{"source":"osv","external_id":"GHSA-9qr2-fx2g-pfvh","url":"https://osv.dev/vulnerability/GHSA-9qr2-fx2g-pfvh","severity":"MODERATE","cvss_score":null,"cvss_vector":null,"cvss_version":null,"first_seen_at":"2026-09-26T09:27:57.752167Z","last_seen_at":"2026-09-26T09:27:57.752167Z"}],"history":[{"at":"2026-09-26T09:27:57.752167Z","event":"source_added","source":"osv","detail":"Source ajoutée : osv"},{"at":"2026-09-26T09:27:06.821503Z","event":"created","source":"nvd","detail":"Détectée via nvd"}]}}