What’s Vulnerable › Vulnerabilities

CVE-2009-1280

• Severity: medium (CVSS 6.8 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2009-04-09 · updated 2026-06-16
• Weakness: CWE-352

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in the com_media component for Joomla! 1.5.x through 1.5.9 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Affected products

• Joomla! Joomla: 1.5, 1.5.0-beta, 1.5.0-beta1, 1.5.0-beta2, 1.5.0-rc1, 1.5.1 (+8)

References

• http://developer.joomla.org/security/news/293-20090301-core-multiple-xsscsrf.html
• http://secunia.com/advisories/34551
• https://exchange.xforce.ibmcloud.com/vulnerabilities/49656
• http://developer.joomla.org/security/news/293-20090301-core-multiple-xsscsrf.html
• http://secunia.com/advisories/34551
• https://exchange.xforce.ibmcloud.com/vulnerabilities/49656

Get alerted when CVE-2009-1280 or the next vulnerability affects your stack