high7.5Public exploit code
CVE-2007-6272
Multiple SQL injection vulnerabilities in index.php in Joomla!
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Joomla! Component com_search 1.5 RC3 - 'index.php' Multiple SQL Injections2007-12-05 · webapps · php · Verified
- Joomla! Component Content 1.5 RC3 - 'view' SQL Injection2007-12-05 · webapps · php · Verified
Impact
Multiple SQL injection vulnerabilities in index.php in Joomla! 1.5 RC3 allow remote attackers to execute arbitrary SQL commands via (1) the view parameter to the com_content component, (2) the task parameter to the com_search component, or (3) the option parameter in a search action to the com_search component.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Joomla | Joomla | Version 1.5rc3 |
Weakness classification
References
- NVD record
- CVE.org record
- http://securityreason.com/securityalert/3422
- http://www.securityfocus.com/archive/1/484603/100/0/threaded
- http://www.securityfocus.com/bid/26707
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38867
- http://securityreason.com/securityalert/3422
- http://www.securityfocus.com/archive/1/484603/100/0/threaded
- http://www.securityfocus.com/bid/26707
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38867