CVE-2007-0374

SQL injection vulnerability in (1) Joomla! 1.0.11 and 1.5 Beta, and (2) Mambo 4.6.1, allows remote attackers to execute arbitrary SQL commands via the id parameter when cancelling content editing.

Link	Resource
http://archives.neohapsis.com/archives/fulldisclosure/2007-01/0355.html	Exploit Patch
http://www.hackers.ir/advisories/festival.txt	Vendor Advisory
http://www.securityfocus.com/bid/19734	Exploit Vendor Advisory
http://osvdb.org/32520
http://www.securityfocus.com/archive/1/459203/100/0/threaded

Configuration 1

cpe:2.3:a:mambo:mambo:4.6.1:*:*:*:*:*:*:* cpe:2.3:a:joomla:joomla:1.5.0_beta:*:*:*:*:*:*:* cpe:2.3:a:joomla:joomla:1.0.11:*:*:*:*:*:*:*

---

Published : 2007-01-19 11:28

Updated : 2018-10-16 04:32

---

NVD link : CVE-2007-0374

Mitre link : CVE-2007-0374

No products.

NVD-CWE-Other