CVEvulnerability

CVE-2014-9102

6.5 MEDIUM Published 2014-11-26 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-11-26
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
Weaknesses
CWE-89

Description

Multiple SQL injection vulnerabilities in the Kunena component before 3.0.6 for Joomla! allow remote authenticated users to execute arbitrary SQL commands via the index value in an array parameter, as demonstrated by the topics[] parameter in an unfavorite action to index.php.

Affected configurations

• kunena kunena (<= 3.0.5)

Related

Weakness · CWE (1)

  • CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness

References