Unscored severity · published Sep 18, 2008
CVE-2008-4103
The mailto (aka com_mailto) component in Joomla! 1.5 before 1.5.7 sends e-mail messages without validating the URL, which allows remote attackers to transmit spam
–
CVSS
1.5%
EPSS
No
On KEV
Description
The mailto (aka com_mailto) component in Joomla! 1.5 before 1.5.7 sends e-mail messages without validating the URL, which allows remote attackers to transmit spam.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.5% · higher than 74% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CM
Com Mailto · Joomla
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-4103
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-4103
developer.joomla.org
http://developer.joomla.org/security/news/273-20080903-core-commailto-spam.html
marc.info
http://marc.info/?l=oss-security&m=122115344915232&w=2
marc.info
http://marc.info/?l=oss-security&m=122118210029084&w=2
marc.info
http://marc.info/?l=oss-security&m=122152798516853&w=2
secunia.com
http://secunia.com/advisories/31789
securityreason.com
http://securityreason.com/securityalert/4275
More from Com Mailto
–
CVE-2009-1499
SQL injection vulnerability in the MailTo (aka com_mailto) component in Joomla! allows remote attackers to execute arbitrary SQL commands via the article parameter in index.php