CVEvulnerability
CVE-2007-0374
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-01-19
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
SQL injection vulnerability in (1) Joomla! 1.0.11 and 1.5 Beta, and (2) Mambo 4.6.1, allows remote attackers to execute arbitrary SQL commands via the id parameter when cancelling content editing.
Affected configurations
• joomla joomla 1.0.11
• joomla joomla 1.5.0 beta
• mambo mambo 4.6.1
References
- http://archives.neohapsis.com/archives/fulldisclosure/2007-01/0355.html Exploit, Patch, Vendor Advisory
- http://osvdb.org/32520 osvdb.org
- http://www.hackers.ir/advisories/festival.txt Vendor Advisory
- http://www.securityfocus.com/archive/1/459203/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/19734 Exploit, Vendor Advisory
- http://archives.neohapsis.com/archives/fulldisclosure/2007-01/0355.html Exploit, Patch, Vendor Advisory
- http://osvdb.org/32520 osvdb.org
- http://www.hackers.ir/advisories/festival.txt Vendor Advisory
- http://www.securityfocus.com/archive/1/459203/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/19734 Exploit, Vendor Advisory