CVE-2008-1505: PHP remote file inclusion vulnerability in the SSTREAMTV custompages (com_custompages) 1.1 and earlier comp...

Security readout for executives and security teams

This is an old Joomla component issue in SSTREAMTV custompages (com_custompages) 1.1 and earlier. The component could let a remote attacker make the server load attacker-controlled PHP, which can become website code execution. Business urgency is high for any still-exposed legacy Joomla site using this component. Exposure is likely limited to legacy Joomla installations that still run SSTREAMTV custompages com_custompages version 1.1 or earlier. The provided affected-product metadata is incomplete, so asset inventory is required before assuming exposure. Treat this as a high-priority legacy exposure issue. It is not a broad modern platform emergency, but any affected public site could face full compromise if the vulnerable component remains installed. Mitigation focus: Inventory Joomla sites for com_custompages 1.1 or earlier.; Remove or disable the component if it is not required.; Check vendor or project guidance for any fixed release or migration path..

Prepared

Jun 28, 2026, 19:09 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.