VulnerabilityModified

CVE-2014-7981

SQL injection vulnerability in Joomla!

HIGH 7.5EPSS 8.54%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (8.54%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

SQL injection vulnerability in Joomla! CMS 3.1.x and 3.2.x before 3.2.3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

CVSS 2.0: 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS: 8.54% probability · 95th percentile
CISA KEV: Not listed
Weakness: CWE-89
Affected: joomla/joomla\!
Source: cve@mitre.org

References

http://developer.joomla.org/security/578-20140301-core-sql-injection.htmlVendor Advisory
http://developer.joomla.org/security/578-20140301-core-sql-injection.htmlVendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.