CVE-2007-0373
Multiple SQL injection vulnerabilities in Joomla!
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 12.0%, higher than 96% of all known CVEs. Patch or mitigate before the next change window.
Description
Multiple SQL injection vulnerabilities in Joomla! 1.5.0 Beta allow remote attackers to execute arbitrary SQL commands via (1) the searchword parameter in certain files; the where parameter in (2) plugins/search/content.php or (3) plugins/search/weblinks.php; the text parameter in (4) plugins/search/contacts.php, (5) plugins/search/categories.php, or (6) plugins/search/sections.php; or (7) the email parameter in database/table/user.php, which is not properly handled by the check function.
- CVSS 2.0
- 6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
- EPSS
- 12.00% probability · 96th percentile
- CISA KEV
- Not listed
- Affected
- joomla/joomla
- Source
- cve@mitre.org
References
- http://archives.neohapsis.com/archives/fulldisclosure/2007-01/0355.htmlExploit
- http://osvdb.org/32527
- http://osvdb.org/32528
- http://osvdb.org/32529
- http://osvdb.org/32530
- http://osvdb.org/32531
- http://osvdb.org/32532
- http://osvdb.org/32533
- http://www.hackers.ir/advisories/festival.txtExploit
- http://www.securityfocus.com/archive/1/459203/100/0/threaded
- http://www.securityfocus.com/bid/22122Exploit, Vendor Advisory
- http://archives.neohapsis.com/archives/fulldisclosure/2007-01/0355.htmlExploit
- http://osvdb.org/32527
- http://osvdb.org/32528
- http://osvdb.org/32529
- http://osvdb.org/32530
- http://osvdb.org/32531
- http://osvdb.org/32532
- http://osvdb.org/32533
- http://www.hackers.ir/advisories/festival.txtExploit
- http://www.securityfocus.com/archive/1/459203/100/0/threaded
- http://www.securityfocus.com/bid/22122Exploit, Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.