high7.5Public exploit code
CVE-2012-1116
SQL injection vulnerability in Joomla!
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Joomla! 2.5.1 - 'redirect.php' Blind SQL Injection2012-03-05 · webapps · php · Verified
Impact
SQL injection vulnerability in Joomla! 1.7.x and 2.5.x before 2.5.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Joomla | Joomla\! | Versions 1.7.0, 1.7.1, 1.7.2, 1.7.3, 1.7.4, 1.7.5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://developer.joomla.org/security/news/391-20120301-core-sql-injection.html
- http://secunia.com/advisories/48005
- http://www.openwall.com/lists/oss-security/2012/03/06/12
- http://www.openwall.com/lists/oss-security/2012/03/06/5
- http://www.osvdb.org/79837
- http://www.securityfocus.com/bid/52312
- https://exchange.xforce.ibmcloud.com/vulnerabilities/73699
- http://developer.joomla.org/security/news/391-20120301-core-sql-injection.html
- http://secunia.com/advisories/48005
- http://www.openwall.com/lists/oss-security/2012/03/06/12
- http://www.openwall.com/lists/oss-security/2012/03/06/5
- http://www.osvdb.org/79837
- http://www.securityfocus.com/bid/52312
- https://exchange.xforce.ibmcloud.com/vulnerabilities/73699