Unrated severityNVD Advisory· Published Apr 9, 2009· Updated Jun 16, 2026
CVE-2009-1280
CVE-2009-1280
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in the com_media component for Joomla! 1.5.x through 1.5.9 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors.
Affected products
15cpe:2.3:a:joomla:joomla:1.5:*:*:*:*:*:*:*+ 14 more
- cpe:2.3:a:joomla:joomla:1.5:*:*:*:*:*:*:*
- cpe:2.3:a:joomla:joomla:1.5.0:beta:*:*:*:*:*:*
- cpe:2.3:a:joomla:joomla:1.5.0:beta1:*:*:*:*:*:*
- cpe:2.3:a:joomla:joomla:1.5.0:beta2:*:*:*:*:*:*
- cpe:2.3:a:joomla:joomla:1.5.0:rc1:*:*:*:*:*:*
- cpe:2.3:a:joomla:joomla:1.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:joomla:joomla:1.5.2:*:*:*:*:*:*:*
- cpe:2.3:a:joomla:joomla:1.5.3:*:*:*:*:*:*:*
- cpe:2.3:a:joomla:joomla:1.5.4:*:*:*:*:*:*:*
- cpe:2.3:a:joomla:joomla:1.5.5:*:*:*:*:*:*:*
- cpe:2.3:a:joomla:joomla:1.5.6:*:*:*:*:*:*:*
- cpe:2.3:a:joomla:joomla:1.5.7:*:*:*:*:*:*:*
- cpe:2.3:a:joomla:joomla:1.5.8:*:*:*:*:*:*:*
- cpe:2.3:a:joomla:joomla:1.5.9:*:*:*:*:*:*:*
- (no CPE)range: 1.5.x through 1.5.9
Patches
Vulnerability mechanics
References
3- developer.joomla.org/security/news/293-20090301-core-multiple-xsscsrf.htmlnvdVendor Advisory
- secunia.com/advisories/34551nvdVendor Advisory
- exchange.xforce.ibmcloud.com/vulnerabilities/49656nvd
News mentions
0No linked articles in our index yet.