high7.5
CVE-2007-4777
SQL injection vulnerability in Joomla!
Impact
SQL injection vulnerability in Joomla! 1.5 before RC2 (aka Endeleo) allows remote attackers to execute arbitrary SQL commands via unspecified vectors, probably related to the archive section. NOTE: this may be the same as CVE-2007-4778.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Joomla | Joomla | Versions 1.5.0_beta, 1.5.0_beta2, 1.5.0_rc1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/39070
- http://osvdb.org/39071
- http://osvdb.org/39072
- http://securityreason.com/securityalert/3108
- http://www.joomla.org/content/view/3831/1/
- http://www.securityfocus.com/archive/1/478451/100/0/threaded
- http://www.securityfocus.com/bid/25508
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36423
- http://osvdb.org/39070
- http://osvdb.org/39071
- http://osvdb.org/39072
- http://securityreason.com/securityalert/3108
- http://www.joomla.org/content/view/3831/1/
- http://www.securityfocus.com/archive/1/478451/100/0/threaded
- http://www.securityfocus.com/bid/25508
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36423