Joomla! 1.5.8 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.
We have discovered 92,593 live websites that are affected by CVE-2008-4122.
| Product | |
| Category | Content Management System |
| Vulnerable Domains | 92,593 live websites (91% of Joomla install base) |
| Vulnerable Versions |
|
| Vulnerable Versions Count | 1 versions ( 0.76% of all versions) |
| 5,608 websites | |
| 25,278 websites | |
| 6,542 websites | |
| 5,633 websites | |
| 4,599 websites | |
| 3,723 websites | |
| 3,672 websites | |
| 3,367 websites | |
| 3,026 websites | |
| 2,724 websites |
| .com | 20,261 websites |
| .it | 16,705 websites |
| .ru | 5,593 websites |
| .de | 3,125 websites |
| .nl | 2,923 websites |
| .cz | 2,796 websites |
| .pl | 2,362 websites |
| .org | 2,270 websites |
| .se | 2,104 websites |
| .co.uk | 1,947 websites |
| Domain | Country | Rank | Contacts |
|---|---|---|---|
| *****.com | **,*** | ||
| ************.com | **,*** | ||
| *********************.com | **,*** | ||
| *****.org | **,*** | ||
| ********.com | **,*** | ||
| *****.it | **,*** | ||
| ******.cz | **,*** | ||
| *******.ru | **,*** | ||
| *******.com | **,*** | ||
| ***.nl | **,*** |