CVE-2007-4778

Multiple SQL injection vulnerabilities in the content component (com_content) in Joomla! 1.5 Beta1, Beta2, and RC1 allow remote attackers to execute arbitrary SQL commands via the filter parameter in an archive action to (1) archive.php, (2) category.php, or (3) section.php in models/. NOTE: this may be the same as CVE-2007-4777.

Link	Resource
http://downloads.securityfocus.com/vulnerabilities/exploits/25508.php
http://www.joomla.org/content/view/3831/1/	Patch
http://www.securityfocus.com/bid/25508	Patch
http://osvdb.org/39072
http://osvdb.org/39070
http://osvdb.org/39071
https://exchange.xforce.ibmcloud.com/vulnerabilities/36423

Configuration 1

cpe:2.3:a:joomla:joomla:1.5.0_rc1:*:*:*:*:*:*:* cpe:2.3:a:joomla:joomla:1.5.0_beta2:*:*:*:*:*:*:* cpe:2.3:a:joomla:joomla:1.5.0_beta1:*:*:*:*:*:*:*

---

Published : 2007-09-10 09:17

Updated : 2017-07-29 01:33

---

NVD link : CVE-2007-4778

Mitre link : CVE-2007-4778

No products.

CWE-89