CVE-2008-4105
JRequest in Joomla! 1.5 before 1.5.7 does not sanitize variables that were set with JRequest::setVar, which allows remote attackers to conduct "variable injection" attacks and have unspecified other impact.
Date published : 2008-09-18
http://developer.joomla.org/security/news/271-20080901-core-jrequest-variable-injection.html