CVE-2009-4104

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• Joomla! Component com_lyftenbloggie 1.04 - SQL Injection2009-11-28 · webapps · php · Verified

Impact

SQL injection vulnerability in Lyften Designs LyftenBloggie (com_lyftenbloggie) component 1.0.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the author parameter to index.php.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://osvdb.org/60518
• http://secunia.com/advisories/37499
• http://securityreason.com/exploitalert/7480
• http://www.securityfocus.com/bid/37140
• http://osvdb.org/60518
• http://secunia.com/advisories/37499
• http://securityreason.com/exploitalert/7480
• http://www.securityfocus.com/bid/37140